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ABSTRACT 


The  Global  Positioning  System  (GPS)  navigation  signal  is  extremely  vulnerable 
to  intentional  and  unintentional  interference.  Increased  dependence  on  GPS  by  military 
users  has  created  a  need  to  quickly  detect  and  locate  interference  at  its  source.  Current 
methods  for  detecting  and  locating  GPS  interference  sources  employ  a  network  of 
multiple  sensors  to  identify  interference.  The  data  collected  from  sensors  is  then  sent  to  a 
remote  centralized  processing  station  and  analyzed  to  determine  the  location  of  the 
interference  source.  Although  this  method  has  demonstrated  effectiveness  in  this 
endeavor,  it  introduces  latency  between  the  time  of  detection  at  the  sensor,  and  the 
location  of  the  source.  The  intent  of  this  thesis  is  to  investigate  whether  a  portable  hand 
held  interference  detection  system  can  provide  more  timely  detection  and  location 
information  to  provide  the  actionable  intelligence  to  the  disadvantaged  GPS  users. 
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I.  INTRODUCTION 


Our  nation  is  at  war.  The  United  States  has  been  deeply  engaged  in  a  war  for  five 
plus  years  against  terrorist  elements  in  Iraq,  Afghanistan,  and  various  other  places  around 
the  world.  The  price  being  paid  in  both  blood  and  treasure  can  never  truly  be  articulated 
or  appreciated.  Figure  1  below,  which  consists  of  a  poignant  picture  and  embedded  quote 
provide  the  motivation  with  which  this  thesis  was  embarked  on. 


A 


What  did  you  do  today  for 
freedom?  Today,  at  the  front,  he 
died  ...  Today,  what  did  you  do? 
Next  time  you  see  a  iist  of  dead 
and  wounded,  ask  yourseif: 

"What  have  i  done  today  for 
freedom’?  ‘What  can  i  do 
tomorrow  for  freedom’?  ‘What 
can  i  do  tomorrow  that  wiii  save 
the  iives  of  men  iike  this  and  heip 
them  win  the  war? 


Figure  1.  Slide  54  from  On  Point  Warrior-Quotes  master  copy  (From  Coffey)^ 


The  possible  improvement  in  increased  combat  lethality  and  survivability  that 
may  be  obtained  by  the  work  included  in  this  thesis  is  wholly  dedicated  as  a  small  means 
of  addressing  the  question  in  the  figure  above:  “What  can  I  do  tomorrow  that  will  save 
the  lives  of  men  like  this  and  help  them  win  the  war?” 


1  Bill  Coffey,  U.S.  Army  Space  and  Missile  Defense  Command  (SMDC),  On  Point  Warrior  Quotes- 
Master  Copy  (Slide  54  of  Powerpoint  Presentation),  2008  Mass  E-Mail  (accessed  July  13,  2008). 
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The  Global  Positioning  System  (GPS),  a  highly  reliable  Position,  Navigation,  and 
Timing  (PNT)  system,  has  beeome  a  ubiquitous  capability  for  both  civil  and  military 
applications.  The  civil  capabilities  provided  by  GPS  are  now  so  thoroughly  embedded  in 
the  day-to-day  lives  of  people  throughout  the  world  that  any  interruption  in  this  service 
would  cause  tremendous  problems  in  numerous  areas.  GPS  provides  the  information 
necessary  for  commercial  aircraft  take-off  and  landing  abilities,  end-to-end  logistics 
monitoring  for  businesses  supply  chain  management,  personal  and  business  navigation, 
and  highly  accurate  surveying,  to  name  a  few.  Figure  2  illustrates  several  of  the 
technologies  systems  and  operations  functions  that  are  reliant  upon  GPS. 


unv#L.MOOiricu/r^ww 

GPS  Dependencies 


Joint  Navigation  Warfare  Center 


I  GPS  Supportina  Trangpoflatioo  Systems 


[  QPS  Suppoftmg  Cofnmijnlcadons  Systems 
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Figure  2.  GPS  Dependent  Systems  and  Operations  (After  JNWC-Navwar-Threat 

Overview  Brief)^ 


2  Robert  "Hawg"  Haseloff,  "JNWC-Navwar-Threat  Overview  Brief  (Unclassified  Portion)  United 
States  Army  FA-40  Symposium"  (Colorado  Springs,  Colorado,  Joint  Navigation  Warfare  Center,  2-5 
September  2008)  (accessed  12  September  2008). 
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The  effects  obtained  by  denial  of  this  GPS  service  to  U.S.  military  applications 
also  creates  the  potential  to  cause  devastating  consequences  by  eliminating  or  degrading 
U.S.  superiority  in  a  myriad  of  military  systems  which  use  the  information  provided  by 
GPS.  There  are  several  different  types  of  jammers  and  sources  of  interference  which 
have  the  ability  to  deny,  degrade,  and/or  disrupt  the  GPS  signal  from  coherently 
providing  its  sought  after  information.  Figure  3  lists  several  of  the  jamming  methods,  as 
well  as,  Electro-Magnetic  Interference. 


UNCLASSIFIED 


Types  of  Jammers 


Joint  Navigation  Warfare  Center 


•  Denial  Jammers 

>  Continuous  Wave  (CW) 

■  Transmits  on  one  frequency 

>  Broadband  Noise 

■  Transmits  random  noise  or  sweeps  the  CW  signal 

>  Spectral  Matching  (Binary  Phase  Shift  Keying) 

■  Transmits  a  GPS  "look  alike”  signal  (digital) 

•  Deception  Jammers 

>  Repeater 

■  Receives  the  real  GPS  signals  and  re-transmits 

>  Spoofer 

■  Generates  coded  signals  from  ground  based  SV 

•  EMI  -  Intentional  and  Unintentional 

Figure  3.  Types  of  Jammers  and  Interference  which  affect  the  GPS  Signal  (From 

JNWC-Navwar- Threat  Overview  Brief)^ 


3  Robert  "Hawg"  Haseloff,  "JNWC-Navwar-Threat  Overview  Brief  (Unclassified  Portion)  United 
States  Army  FA-40  Symposium"  (Colorado  Springs,  Colorado,  Joint  Navigation  Warfare  Center,  2-5 
September  2008)  (accessed  12  September  2008). 
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The  enemies  of  the  United  States  are  acutely  aware  of  this  potential  Achilles  heel 
and  are  actively  seeking  ways  to  exploit  this  potential  weakness.  One  of  the  major  ways 
that  they  are  trying  to  achieve  this  is  through  effective  jamming  of  GPS  signals 

At  the  Paris  Air  Show  in  1999,  a  Russian  company  called  Aviaconversia 
demonstrated  a  4-watt  GPS  jammer.  The  jammer  weighed  about  19 
pounds  and  was  capable  of  denying  GPS  reception  for  more  than  100 
miles.  Many  such  jammers  are  available  through  the  Internet  for  as  little  as 
$39.9  [$3999].4 

The  previous  quote  taken  from  an  anonymous  source  on  the  Internet  clearly 
demonstrates  that  there  is  both  a  demand  and  an  industry  out  there  capable  of  providing 
low-cost  GPS  jammers  that  are  effective  over  fairly  long  ranges.  Figure  4  shows  an 
Aviaconversia  4W  GPS  Jammer  that  was  offered  for  sale  at  the  Moscow  Air  show  in 
1997.  Knowing  that  these  types  of  inexpensive  GPS  jammers  are  readily  available,  in 
addition  to  their  more  powerful  military-grade  counterparts,  it  becomes  blatantly  obvious 
that  our  military  forces  must  have  a  rapid  and  effective  means  of  identifying  these 
jamming  sources  so  that  their  interfering  signals  may  be  neutralized. 


4  Wikipedia  contributors,  "Aviaconversiya,"  Wikipedia,  The  Free  Encyclopedia, 
http://it. Wikipedia. org/wiki/aviaconversiya?oldid=17841971  (accessed  19  September  2008). 
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Figure  4.  Aviaconversia  4W  GPS  Jammer^ 


As  previously  stated,  relatively  low  power  GPS  jammers  are  effective  over 
extensive  ranges,  especially  if  they  are  employed  from  the  air  in  which  they  have  a 
straight  line  of  sight  signal  path  which  is  less  impeded  by  obstacles  on  the  ground. 
Figure  5  illustrates  jammers  at  various  power  levels  and  their  effective  ranges  when 
compared  to  the  power  levels  required  to  affect  various  levels  of  GPS  Acquisition. 
Figure  6  gives  a  graphical  representation  of  the  effectiveness  of  a  four- watt  jammer 
employed  from  both  the  ground  and  the  air.  Figure  6  also  illustrates  the  significant 
differences  of  effective  GPS  jamming  ranges  when  comparing  land-based  jamming 
which  has  many  obstacles  such  as  terrain,  vegetation,  buildings,  etcetera  to  block  or 
attenuate  the  jamming  signal  and  that  jamming  which  occurs  in  the  air  and  unimpeded  by 


5  Rockwell  International,  "GPS  Jamming,"  Rockwell  International,  http://www.acll.org/gpsl.htm, 
(accessed  10  September  2008). 
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anything  except  the  natural  physical  characteristics  of  the  airspace.  Figure  6  further 
shows  that  loss  of  lock  due  to  air-based  jamming  occurs  at  38km  and  for  land-based 
jamming  loss  of  lock  doesn’t  occur  until  you  get  within  1km. 
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UNCLASSIFIED 


Figure  5.  Jammer  effects  versus  distance  (From  JNWC-Navwar-Threat  Overview 

Brief)® 


6  Haseloff,  JNWC-Navwar-Threat  Overview  Brief  (Unclassified  Portion)  United  States  Army  FA-40 
Symposium,  1-2-30 
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Loss  of  Acquisition 
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Figure  6.  Received  Jammer/Signal  (J/S)  as  a  Function  of  Distance  from  Jammer  (From 

Brown,  Reynolds,  Roberts,  and  Serie)^ 


Since  the  onset  of  declared  Full  Operational  Capability  of  the  GPS  satellite 
constellation  on  April  27,  1995^  by  Air  Force  Space  Command,  GPS  satellites  have 
become  an  essential  element  in  the  United  States  military’s  arsenal  to  fight  in  and  win 
this  nation’s  wars.  GPS  satellites  provide  the  PNT  information  necessary  for  our  forces 
to  have  and  maintain  the  situational  awareness  to  know  when  and  where  they’re  at  while 
stationary  or  on  the  move.  The  kind  of  information  provided  by  GPS  is  essential 
regardless  of  if  you’re  using  it  for  force  tracking  and  situational  awareness  as  in  Blue 
Force  Tracking  (BFT)/Blue  Force  Situational  Awareness  (BFSA),  using  it  to  provide 
highly  accurate  position  and  navigation  information  to  direct  smart  munitions,  or  using  it 
to  assist  in  the  conduct  of  Combat  Search  and  Rescue  (CSAR)  missions. 


7  Alison  Brown  and  others,  "Jammer  and  Interference  Location  System  -  Design  and  Initial  Test" 
Alexandria,  1999). 

8  United  States  Naval  Observatory,  "USNO  NAVSTAR  Global  Positioning  System," 
http://tycho.usno.navy.mil/gpsinfo.html  (accessed  19  September  2008). 
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The  challenge  of  monitoring  GPS  signals  for  interference  (intentional  or 
unintentional)  and  analyzing  the  effects  that  this  interference  has  on  current  and  future 
operations  are  issues  that  are  being  brought  up  by  those  space  warriors  recently  returning 
from  deployments  in  Iraq  and  Afghanistan. 

Position,  Navigation,  and  Timing  Navigation  through  the  use  of  satellites 
allows  for  extremely  accurate  maneuver  and  targeting.  Many  systems  also 
depend  on  Global  Positioning  System  (GPS)  timing  for  the 
synchronization  of  communications.  The  number  of  land  force  systems 
that  have  an  integrated  GPS  receiver  is  large  and  growing,  to  the  point  that 
numerous  missions  are  dependent  on  it.  Widespread  use  of  GPS  in 
military  operations  in  the  last  few  years  has  uncovered  unforeseen 
problems,  and  Army  and  Marine  unit  staffs  are  now  routinely  required  to 
resolve  complex,  technical  anomalies  with  GPS  in  support  of  operations. 
Furthermore,  staff  members  must  monitor  the  accuracy  of  GPS  and  the 
effect  this  accuracy  may  have  on  current  and  planned  operations. ^ 

It  is  with  these  challenges  in  mind  that  this  thesis  seeks  to  address  the  issue  of 
GPS  Jamming  and/or  interference  by  attempting  to  identify  its  source  and  location.  The 
idea  of  GPS  jamming  and  interference  location  detection  is  nothing  new;  it  has  been 
going  on  for  almost  as  long  as  GPS  has  been  in  existence. 

There  are  several  programs  both  unclassified  and  classified  that  address  the 
challenge  of  GPS  jamming.  A  Jammer  Location  (JLOC)io  System  approach  is  a  system 
that  has  been  suggested  to  use  numerous  receivers  that  send  back  their  GPS  information 
to  a  centralized  processing  station,  which  calibrates  their  information  against  a  known 
grid  coordinate  that  has  previously  been  taken  prior  to  the  onset  of  jamming.  This  known 
coordinate  is  then  compared  to  a  receiver  reported  coordinate  during  jamming  and  the 
difference  is  obtained.  This  is  done  for  several  known  locations  in  a  given  area  of 
operations.  These  known  deviations  are  then  calibrated  for  the  various  other  receivers 
throughout  the  area  of  operations.  Knowing  these  deviations,  analysis  can  then  be  done 


9  Bob  Guerriero,  LTC,  Tom  James,  LTC  and  Jim  Rozzi,  LTC,  "The  Future  of  Army  Spaee  Forees  -  A 
Vision  to  Optimize  Taetieal  and  Operational  Spaee  Support,"  The  Army  Spaee  Journal,  2007,  12, 
http://www.smde-armyforees.army.mil/ASJ/Edition.asp?E=2  (aeeessed  13  July  2008). 

10  Brown  and  others.  Jammer  and  Interferenee  Loeation  System  -  Design  and  Initial  Test 
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to  ascertain  the  most  likely  souree  and  loeation  of  the  jammer.  This  system  would 
provide  for  a  eentralized  analysis  and  proeessing  hub  that  eould  be  queried  to  try  to 
determine  jamming  and  interferenee  that  has  already  oeeurred. 

The  problem  to  date,  at  least  from  a  forward-deployed  soldier  perspeetive,  is  that 
although  a  jammer  loeation  may  be  able  to  eventually  be  determined,  the  time  it  takes  is 
not  responsive  enough  to  allow  for  these  soldiers  to  eontinue  the  mission  unimpeded. 
The  main  objeetive  of  this  thesis  is  to  make  inroads  towards  eoming  up  with  an  initial 
design  of  a  hand-held  GPS  interferenee  deteetor  that  eould  provide  aetionable 
intelligenee  to  forward-deployed,  disadvantaged  soldiers  whieh  allows  them  to  take  the 
immediate,  neeessary  aetion  to  terminate  that  interferenee. 
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II.  GPS  LINK  BUDGET 


The  amount  of  power  available  to  terrestrial  GPS  reeeivers  is  extremely  low. 
Figure  7  provides  some  practical  perspective  to  illustrate  just  how  modest  this  power 
level  is  and  why  the  GPS  signal  is  susceptible  to  jamming  over  great  distances  with  a  low 
power  jammer. 


UNCLASSIFIED 

Signal  Strength 


Joint  Navigation  Warfare  Center 


•  Local  FM  Radio  Station  100,000  Watts 

•  Local  AM  Radio  Station  50,000  Watts 

•  Cell  Phone  Towers  800  Watts 

•  GPS  Signal  0.0000000000000001  Watts 

>The  signal  strength  is  -160  dBW 
>  Natural  Noise  Floor  is  ~-106  dBW 


Figure  7.  Signal  Strength  comparisons  with  the  GPS  Signal  (From  JNWC-Navwar- 

Threat  Overview  Brief)  ^ 


A.  THE  GENERAL  LINK  BUDGET  EQUATION 

In  order  to  establish  a  successful  communications  link,  orbiting  GPS  satellites  and 
terrestrial-based  GPS  receivers  must  meet  the  requirements  of  the  link  budget  equation. 
The  general  link  budget  equation  is  given  by:  Sr  =  Pt  +  Li  +  Gt  +  Lfs  +  Gr+  Lq,  where, 

•  Sr  =  Received  signal  power 


1 1  Haseloff,  JNWC-Navwar-Threat  Overview  Brief  (Unelassified  Portion)  United  States  Army  FA-40 
Symposium,  1-2-30 
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•  Pt  =  Satellite  transmitter  power 

•  Li  =  Transmitter  line  losses 

•  Gt  =  Satellite  transmitter  antenna  gain 

•  Lfs  =  Loss  due  to  free  space 

•  Gr  =  Receiver  antenna  gain 

•  Lo  =  Other  losses 

Each  of  the  terms  in  the  link  budget  equation  represented  as  either  power  or  gain 
is  assigned  a  positive  value,  while  those  annotated  as  losses  are  assigned  a  negative  value. 
The  sum  of  all  the  gains  and  losses  determines  the  power  available  at  the  GPS  receiver. 
The  minimum  power  requirement  at  the  receiver  is  based  on  a  quantity  known  as  the 
signal-to-noise  ratio  or  SNR.  Figure  8  depicts  both  the  Jammer-to-Signal  Ratio  (JSR) 
and  SNR  for  a  given  set  of  testing. 


FIGURE  1  lamming-tosigrvil  ratio  (ISR)  diiriog  the  simulations 


FIGURE  2  SNR  of  all  channels  in  tracking  mode  (0  dB  means  no 
tracking.) 


Figure  8.  Jammer-to-Signal  Ratio  and  SNR  graphs  (From  GPS  World)!^ 

As  its  name  suggests,  the  SNR  is  formed  by  the  ratio  of  the  received  signal  power, 
Sr  to  the  noise  power.  Noise  power,  N,  is  given  by:  N  =  kTB,  where, 

•  k  =  the  Boltzmann’s  constant  1.38x10'^^  Joules/K 

•  T  =  the  receiver  temperature  in  degrees  Kelvin 

•  B  =  Bandwidth  of  the  receiver  in  Hertz 

As  a  general  rule  of  thumb,  the  minimum  power  required  to  establish  a  link  is 
determined  by  a  receiver  signal  power  that  is  10  decibels  above  the  noise  power. 

12  Boqe  Forssell  and  Trend  Olsen,  "GPS  World  -  Jamming  GPS,"  GPS  World, 
http://www.gpsworld.com/gpsworld/content/printContentPopup.jsp?id=43432  (accessed  19  September 
2008). 
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The  sum  formed  by  the  first  three  terms  in  the  link  equation  is  often  referred  to  as 
the  Effeetive  Isotropie  Radiated  Power,  or  EIRP.  This  combined  term  is  generally  used 
to  calculate  a  link  budget  when  the  individual  terms  are  not  available.  Each  GPS  satellite 
is  equipped  with  multiple  transmitters  for  which  the  EIRP  is  known.  The  transmitters  are 
dedicated  to  emitting  at  1575.42  MHz  and  1227.60  MHz.  Each  of  these  frequencies  is 
commonly  referred  to  as  the  El  and  E2  link  respectively 

1,  LI  Link 

The  El  link  has  the  following  terms  in  the  link  equation: 

•  EIRP  =  Pt  + El +  Gt  =  26.8  dBW 

•  Eft  =  -184.4  dBW 

•  Gr  =  3  dBW 

•  Eo  =  -5.4dBW 

This  gives  the  power  available  to  the  receiver  as: 

•  Sr  =  EIRP  +  Eft  +  Gr  +  Eo  =  -160  dBW  or  IxIO'^^  Wi3 

All  GPS  receivers  must  have  the  sensitivity  to  detect  this  extremely  low  power 
signal  to  establish  a  link. 

2,  L2  Link 

The  L2  link  has  the  following  terms  in  the  link  equation: 

•  EIRP  =  Pt  + El +  Gt=  19.7  dBW 

•  Eft  =  -182.3  dBW 

•  Gr  =  3  dBW 

•  Eo  =  -6.4  dBW 

This  gives  the  power  available  to  the  receiver  as: 

•  Sr  =  EIRP  +  Eft  +  Gr  +  Eo  =  -166  dBW  or  2.5x10'^’  Wi4 


13  Navtech  GPS,  "GPS  LI  Link  Budget,"  http://www.navtechgps.com/pdf/GPS  LI  Link  Budget 
ERP.pdf  (accessed  22  September  2008). 

14  Navtech  GPS,  "GPS  L2  Link  Budget," 

http://www.navtechgps.com/pdf/GpsNetworking_LinkBudget.pdf  (accessed  22  September  2008). 
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As  demonstrated  in  Figure  9,  the  reeeiver  power  quantities  for  both  the  LI  and  L2 
links  at  are  at  relatively  low  levels.  GPS  receivers  sensitive  enough  to  detect  these  low 
power  levels  are  also  susceptible  to  local  interference  from  transmitters  operating  on  the 
same  frequency. 


Figure  9.  GPS  Signal  Strength  Level  vs.  Elevation  Angle  (From  Global  Positioning 
System  Standard  Positioning  Service  Signal  Specification) 


15  USCG,  "Global  Positioning  System  Standard  Positioning  Service  Signal  Specification,  2nd 
Edition,"  USCG,  http://www.navcen.uscg.gov/pubs/gps/sigspec/gpsspsl.pdf  (accessed  14  August  2008). 
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III.  METHODS  OF  DETECTION  AND  LOCALIZATION 


There  are  numerous  methods  available  for  detecting  interference  on  GPS  signals. 
When  one  considers  that  the  GPS  signals  (LI  and  L2)  are  nothing  more  than  RF  signals 
at  their  respective  frequencies  it  becomes  amazingly  clear  just  how  susceptible  they  are  to 
interference,  whether  it  be  intentional  or  not.  Knowing  the  reliability  or  certainty  of  the 
information  given  by  a  system  is  of  utmost  importance  to  the  user.  The  trustworthiness 
of  the  information  obtained  has  also  been  described  as  the  integrity  of  the  system. 

Integrity  can  be  defined  as  a  measure  of  confidence  on  the  specified 
accuracy  of  any  given  system.  Precision  GPS  applications  such  CAT  II/III 
aircraft  landings  place  demands  for  high  levels  of  integrity  from  a  GPS 
receiver,  given  the  risks  involved.  Unfortunately  RF  interference,  which 
occurs  frequently  in  the  operating  environment  of  a  GPS  receiver,  can 
surreptitiously  degrade  accuracy,  and  thereby  compromise  the  integrity  of 
the  receiver.  Such  interference  may  be  intentional  (from  an  RF  jammer) 
or  non-intentional,  as  would  result  from  channel  cohabitance  or  harmonics 
from  mobile  cellular,  satellite,  TV  and  FM  radio. 

Analyzing  the  integrity  of  the  GPS  signal  at  the  receiver  location  allows  for  the 
determination  of  whether  the  signal  is  experiencing  interference  or  not.  One  of  the  most 
pressing  problems  that  is  not  addressed  by  receivers  themselves  is  the  challenge  of  noise 
and  how  that  may  affect  the  pseudorange  error  of  a  GPS  signal.  The  higher  the  noise 
from  either  a  Continuous  Wave  (CW)  source  or  an  Additive  White  Gaussian  Noise 
(AWGN)  source  on  a  GPS  RF  signal  causes  the  Carrier-to-Noise  (C/No)  ratio  to  be 
reduced  which  in  turn  causes  the  pseudorange  error  to  increase.  This  detrimental  error  to 
the  GPS  accuracy  could  go  totally  unnoticed  if  there  were  not  some  sort  of  analysis  being 
automatically  done  on  the  signal  to  ensure  that  this  type  of  induced  error  was  not 
occurring.  Some  of  the  more  common  and  familiar  methods  of  testing  the  integrity  of  an 
RF  signal  in  use  these  days  are:  Correlator  Output  Power,  Variance  of  Correlator  Output 


16  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Reeeiver 
Autonomous  Interferenee  Deteetion" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_deteet_ann98.pdf,  April  1998)  (aeeessed  30  July 
2008). 
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Power,  Carrier  Phase  Vacillation,  Active  Gain  Control  (AGC)  Control  Loop  Gain, 
Multiple-Model  Adaptive  Estimation  (MMAE),  and  Receiver  Estimation  of  C/No. 

After  determining  that  interference  is  occurring  on  the  GPS  Signal,  it  is  then 
useful  to  know  where  that  interference  is  emanating  from  so  that  actions  can  be  taken  to 
resolve  the  interference  problem.  The  challenge  of  localization  of  the  interference  is  one 
that  can  be  approached  from  numerous  directions  as  well.  Three  of  the  most  common 
approaches  to  localization  of  RE  interference  are  by  using  the  following:  Carrier/Noise 
Jammer  Eocation  Sensor,  Angle  of  Arrival  Jammer  Eocation  Sensor,  and  Time 
Difference  of  Arrival  Jammer  Eocation  Sensor.  Eet’s  first  take  a  look  at  the  interference 
detection  methods. 

A.  DETECTION 

1.  Correlator  Output  Power  (COP) 

Correlator  Output  Power  as  defined  by  Awele  Ndili  and  Dr.  Per  Enge  of  Stanford 
University  at  their  presentation  at  the  1998  IEEE  Position,  Eocation  and  Navigation 
Symposium  -  PEANS  ‘98  is: 

The  correlator  output  power  (COP)  is  a  quantity  computed  in  the  receiver 
which  gives  an  indication  of  the  average  post-correlation  signal  to  noise 
ratio.  It  is  computed  from  equation  1  below: 

2  2 

Correlator  Output  Power  =  I  +  Q  /  Expected  Noise  Floor  (1) 

where  I  and  Q  are  the  1  ms-averaged  in-phase  and  quadrature  prompt 
correlator  signal.  Expected  noise  floor  is  receiver  specific,  and  is  derived 
from  statistic  expectations  for  a  specific  receiver  digital  implementation, 


17  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Receiver 
Autonomous  Interference  Detection" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_detect_ann98.pdf,  April  1998)  (accessed  30  July 
2008). 
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Looking  at  the  equation  given  in  the  quote  above  it  beeomes  readily  apparent  that 
for  a  specifie  reeeiver  with  a  known  expeeted  noise  floor  and  the  measurements  of  the  in- 
phase  and  quadrature  signals,  the  eharaeteristic  COP  can  be  calculated  for  a  given 
receiver.  A  different  value  for  COP  indicates  that  some  type  of  noise  interference  may  be 
occurring  due  to  a  decrease  in  COP. 

2.  Variance  of  Correlator  Output  Power 

Correlator  Output  Power  variance  is  exactly  as  the  name  implies,  it  is  the  variance 
of  the  Correlator  Output  Power.  Variance  is  the  standard  mathematical  and  statistical 
definition  of  variance,  which  is  the  square  of  the  standard  deviation.  The  idea  of  using 
COP  variances  as  a  metric  for  the  integrity  of  a  GPS  signal  are  due  to  the  fact  that  they 
serve  as  robust  indices,  in  various  types  of  jamming  environments,  to  illustrate  changes  to 
GPS  signals  as  encountered  at  the  receiver.  In  Figure  10  below,  Ndili  and  Enge 
graphically  depict  the  effects  that  interference  has  on  COP  variance  beginning  with 
interference  and  through  reacquisition  of  the  GPS  signal.  Figure  10  clearly  illustrates  the 
decrease  in  variance  between  the  signal  being  subjected  to  interference  and  then  not,  from 
roughly  25  dB  to  approximately  6  or  7dB.  It  is  also  easily  observable  the  step  increase  in 
the  COP  when  cycling  out  of  interference. 
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3.  Carrier  Phase  Vacillation 

This  metric  examines  the  fluctuation  of  carrier  phasor  angles  of  the  GPS  signal 
with  respect  to  time.  It  has  been  shown  that  these  variances  in  the  phasor  angles  are  a 
function  of  the  level  of  noise  within  the  signal.  Articulated  in  a  more  precise  manner; 

Carrier  phase  vacillation  provides  a  measure  of  the  variance  or  jitter  in 
carrier  phase  measurements  from  one  measurement  epoch  to  the  next,  and 
is  defined  here  as: 

Carrier  Phase  Vacillation  = 

Time  average [abs  {Carrier  Phasci  -  Carrier  Phasci-i}] 

where  i  is  the  1  ms  epoch  index. 


18  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Reeeiver 
Autonomous  Interferenee  Deteetion" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_deteet_ann98.pdf,  April  1998)  (aeeessed  30  July 
2008). 

19  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Reeeiver 
Autonomous  Interferenee  Deteetion" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_deteet_ann98.pdf,  April  1998)  (aeeessed  30  July 
2008). 
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This  carrier  phase  vacillation  is  a  robust  indicator  of  the  level  of  noise  present  in  a 
signal  and  is  therefore  also  a  good  choiee  for  using  as  an  identifier  of  interference.  Noise 
eomes  not  only  from  that  generated  by  the  interference  signal,  but  also  that  noise  that  is 
inherent  within  the  reeeiver  cloek.  Figure  1 1  provides  a  graphic  example  of  the  effects  of 
noise  on  the  earner  phasor  angles  of  a  GPS  signal. 

The  data  used  to  generate  this  graph  eomes  from  the  aretangent  of  the  in-phase 
and  quadrature  signal  phase  measurements.  For  this  particular  plot,  the  carrier  phase 
vacillation  is  approximately  1 1  degrees. 


Figure  1 1 .  Carrier  Phase  for  a  GPS  Receiver  with  a  FLL  Carrier  Tracking  Loop  (From 

Ndili  &  Enge)20 


20  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Reeeiver 
Autonomous  Interferenee  Deteetion" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_deteet_ann98.pdf,  April  1998)  (aeeessed  30  July 
2008). 
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4. 


Active  Gain  Control  (AGC)  Control  Loop  Gain 


Active  Gain  Control  is  another  test  statistic  that  is  useful  in  identifying  and 
eorroborating  that  interferenee,  in  the  form  of  pseudorange  error,  is  oeeurring  on  a  signal. 
The  analog  signal  from  GPS  is  digitized  and  eonverted  to  a  digital  signal  by  means  of  a 
eonverter  that  is  set  to  maintain  a  speeified  ratio  of  digitized  signal  output  levels.  The 
linear  relationship  between  inerease  AGC  and  inereased  pseudorange  error  generally 
holds,  exeept  in  the  eases  of  satellite  signal  attenuation  and  pulsed  CW  and  pulsed 
AWGN  interferenee.  See  Figure  12  which  provides  the  data  plots  of  an  experiment 
illustrating  these  attributes  and  relationships. 

In  the  ease  of  signal  attenuation,  this  result  is  expeeted.  AGC  is  impaeted  by  the 
total  power  of  ineoming  signals  from  all  satellites  in  view  and  therefore  the  depletion  of 
one  satellite’s  signal  power  will  not  have  as  significant  an  impact  on  AGC  gain  as  one 
might  think.  Therefore,  in  the  ease  of  spaeecraft  vehiele  signal  attenuation,  AGC  Control 
Loop  Gain  is  not  a  metric  for  determining  interferenee. 

For  the  seenario  of  pulsed  CW  and  pulsed  AWGN  interferenee  it  has  been  shown 
that  a  linear  relationship  between  these  pulsed  interferences’  pseudorange  error  and  AGC 
gain  does  not  exist  either.  Early  on,  the  pseudorange  error  generally  beeomes  unaffeeted 
by  increases  in  AGC,  therefore  no  one-to-one  linear  relationship.  Here  again,  in  the  eases 
of  pulsed  CW  and  pulsed  AWGN,  AGC  Control  Loop  Gain  would  not  be  a  wise  selection 
as  the  sole  determination  of  interferenee  oeeurring  for  a  given  signal. 
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AGC  Oain  vs  Pseudorange  Error 


Quantizer  Threshoid 


Figure  12.  Pseudorange  Error  vs.  AGC  Gain  (From  Ndili  and  Eng)2i 


One  thing  noted  in  the  paper  by  Ndili  and  Enge, 

This  peeuliarity  of  AGC  gain  ean  be  used  in  eonjunetion  with  other  test 
statisties  to  diseriminate  between  pseudorange  aeeuraey  degradation  due 
to  pulsed  and  non-pulsed  interferenee,  and  signal  bloekage-22 

For  example,  if  one  referred  to  the  COP,  COP  varianee.  Carrier  Phase  Vaeillation 
metries  they  eould  determine  that  interference  was  occurring.  If  they  also  looked  at  the 
AGC  Gain  and  noted  no  significant  increase  in  pseudorange  error  this  would  indicate  that 
some  type  of  pulsed  jamming  (CW  or  AWGN)  was  occurring. 


21  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Reeeiver 
Autonomous  Interferenee  Deteetion" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_deteet_ann98.pdf,  April  1998)  (aeeessed  30  July 
2008). 

22  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Reeeiver 
Autonomous  Interferenee  Deteetion" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_deteet_ann98.pdf,  April  1998)  (aeeessed  30  July 
2008). 
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On  the  other  hand,  if  they  noted  from  the  AGC  Gain  versus  Pseudorange  error 
plot  that  pseudorange  error  was  inereasing  without  any  signifieant  increase  in  the 
quantizer  threshold,  this  would  indicate  that  Spacecraft  Vehicle  attenuation  might  be  the 
culprit  for  the  interference. 

5.  Multiple-Model  Adaptive  Estimation  (MMAE) 

Multiple -Model  Adaptive  Estimation  (MMAE)  is  another  method  used  to  detect 
interference  on  a  GPS  signal.  MMAE  makes  use  of  the  estimation  prowess  of  Kalman 
filters  in  order  to  provide  a  best  guess  for  accurate  information.  In  an  October  1998 
paper  in  IEEE  by  White,  Maybeck,  and  DeVilbiss  they  described  the  MMAE  process  as 
follows: 

Such  an  MMAE  is  composed  of  a  bank  of  parallel  filters,  each 
hypothesizing  a  different  failure  status,  along  with  an  evaluation  of  the 
current  probability  of  each  hypothesis  being  correct,  to  form  a  probability- 
weighted  average  state  estimate  as  an  output. 

Eor  interference/jamming  degradation  represented  as  increased 
measurement  noise  variance,  simulation  results  show  that,  because  of  the 
good  failure  detection  and  isolation  (EDI)  performance  using  MMAE,  the 
blended  navigation  performance  is  essentially  that  of  a  single  extended 
Kalman  filter  (EKE)  artificially  informed  of  the  actual  interference  noise 
variance.23 

Basically,  the  MMAE  process  consists  of  taking  the  information  obtained  from  a 
sensor  and  passing  that  information  through  various  Kalman  filters  that  have  been  set  up 
to  model  various  environments  and  conditions  that  might  be  experienced  by  the  sensor. 
This  information  is  then  sent  out  from  the  Kalman  filters  in  the  form  of  a  computed  state 
vector  and  its  corresponding  residuals.  The  size  of  residuals  obtained  is  an  indicator  as  to 
the  level  of  agreement  between  that  particular  Kalman  filter’s  model  and  that  actual 
information  obtained  from  the  sensor.  The  residual  information  is  analyzed  by  a 
Conditional  Probability  Weighting  Computation  which  determines  the  probability  of 


23  Nathan  A.  White,  Peter  S.  Maybeek  and  Stewart  DeVilbiss,  "Deteetion  of  interferenee/jamming  and 
Spoofing  in  a  DGPS-Aided  Inertial  System,"  IEEE  Transaetions  on  Aerospaee  and  Eleetronie  Systems  34, 
no.  4  (IEEE  Transaetions  on  Aerospaee  and  Eleetronie  Systems.  Vol.  34,  no.  4,  pp.  1208-1217.  Oetober 
1998),  1208-1217. 
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model  accuracy  for  this  Kalman  filter.  This  is  done  for  every  Kalman  filter  and  then  the 
individual  probabilities  are  then  reconstituted  back  together  and  a  Bayesian  blended 
estimate  is  then  given.  Figure  13  pictorially  depicts  the  MMAE  process. 
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Figure  13.  MMAE  Estimation  process  (Erom  White,  Maybeck,  &  DeVilbiss)24 

6.  Receiver  Estimation  of  C/No 

This  approach  at  the  detection  and  characterization  of  CW  interference  is  one  of 
the  more  recent  attempts  and  was  presented  in  April  2006  at  the  Position,  Location,  and 
Navigation  Symposium  for  lEEE/ION.  The  title  of  the  paper  is:  “A  Novel  Approach  in 
Detection  and  Characterization  of  CW  Interference  of  GPS  Signal  Using  Receiver 
Estimation  of  C/No.”  This  approach  uses  some  of  the  previously  described  metrics  and 
then  seeks  to  slim  down  the  hardware  and  software  requirements  necessary  to  do  this. 

In  this  paper,  AGC  level  together  with  correlator  output  power  is  used  to 
detect  and  characterize  the  RFI  but  the  difference  is  that  the  receiver 
simply  uses  a  standard  correlator.  The  other  advantage  of  this  algorithm  is 


24  Awele  Ndili,  Stanford  University  and  Dr.  Per  Enge,  Stanford  University,  "GPS  Reeeiver 
Autonomous  Interferenee  Deteetion" 

(http://waas.stanford.edu/~wwu/papers/gps/PDF/interfere_deteet_ann98.pdf,  April  1998) ,  (aeeessed  30 
July  2008). 
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that  it  is  capable  of  detecting  and  characterizing  CW  RFI  even  if  it  is  not 
close  in  frequency  to  any  of  the  C/A  code  spectral  lines  .25 

The  overall  thrust  of  this  method  of  detection  and  characterization  is  to  compare 
the  theoretical  C/No  with  the  actual  C/No  and  then  using  this  information  along  with  the 
knowledge  of  the  structure  of  the  GPS  C/A  code,  then  the  existence  and  characterization 
of  the  interference  can  be  determined. 

Figure  14  illustrates  the  process  by  which  the  C/A  code  is  combined  with  the 
navigation  data  and  then  the  CW  RFI  and  noise  are  added.  It  is  then  shown  that  the 
incoming  code  is  compared  and  multiplied  by  the  receiver’s  replica  code  and  then  the 
tracking  loop’s  low  pass  filter  filters  out  data  and  interference  outside  the  bandwidth. 
The  take  away  behind  the  set  of  graphs  within  this  consolidated  figure  is  to  illustrate  that 
J  before  (interference  power  before)  is  different  than  J  after  (interference  power  after). 
The  value  of  J  after  is  determined  by  the  strength  of  the  nearest  line  to  the  interference. 
The  following  quote  describes  why  this  is  important. 

Now,  if  we  have  an  RFI  with  fixed  frequency  and  a  GPS  signal  with 
Doppler  frequency  that  varies  with  satellite  motion,  over  time  the  RFI 
coincides  with  several  different  consecutive  lines  in  the  spectrum.  Each  of 
these  lines  has  its  own  unique  effect  on  the  remaining  interference  in  the 
output  of  the  loops.  We  propose  to  examine  the  effect  of  a  series  of  lines, 
and  thus  calculate  the  frequency  of  the  RFI.  The  quantity  that  can  best 
reflect  this  effect  is  the  correlator  output  power.  Carrier  to  noise  ratio 
which  quantifies  the  quality  of  the  signal  is  the  parameter  which  is  use  for 
this  purpose.25 

Figure  15  graphically  depicts  the  correlator  process  at  the  receiver.  This  figure 
illustrates  the  fact  that  the  incoming  GPS  signal  gets  processed  through  both  a  code 
tracking  loop  as  well  as  a  carrier  tracking  loop,  which  consists  of  both  the  In-Phase  and 


25  A.T.  Balaei,  A.  G.  Dempster,  and  J.  Barnes,  A  Novel  Approach  in  Detection  and  Characterization 
of  CW  Interference  of  GPS  Signal  using  Receiver  Estimation  of  C/No,  2006),  1 120-1126. 

26  A.  T.  Balaei,  A.  G.  Dempster,  and  J.  Barnes,  A  Novel  Approach  in  Detection  and  Characterization 
of  CW  Interference  of  GPS  Signal  using  Receiver  Estimation  of  C/No,  2006),  1 120-1126. 
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Quadrature  portions  of  the  signal  being  passed  through  low-pass  fdters  and  eombined  and 
then  fed  baek  through  a  low-pass  filter  and  oseillator  and  then  baek  to  be  eombined  with 
the  C/A  eode. 
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Figure  1  Spreadmg  the  data  over  the  C/A  code 
spectrum  bandwidth 
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Figui  e  2  Interference  and  background  noise  is 
added  to  make  the  final  GPS  signal  receu  ed  at 
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Figure  3  Code  is  despread  b\’  getting  multiphed 
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Figure  4  Trackmg  loop  low  pass  filter,  filters  the 
data  and  the  mterference  which  is  outside  the 
filter  bandwidth  out 

Figure  14.  Development  of  C/A  code  with  CW  RFI  then  passed  through  a  receiver’s  low 

pass  filter  (After  Balaei,  Dempster,  and  Bames)^^ 


27  A.  T.  Balaei,  A.  G.  Dempster  and  J.  Barnes,  A  Novel  Approaeh  in  Deteetion  and  Charaeterization 
of  CW  Interferenee  of  GPS  Signal  using  Reeeiver  Estimation  of  C/No,  2006),  1 120-1126. 
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Figure  15.  Correlator  (Code  and  Carrier  Tracking  Loops)  (From  Balaei,  Dempster,  and 

Bames)28 


The  expression  for  the  theoretical  C/No  was  also  previously  developed  by  the 
same  authors  who  authored  the  above  approach.  In  their  previous  work  they  developed 
the  equation  for  C/No  to  be  as  follows: 

C;,/No .  (Tj^o(r).Mnc(Ayr^))- 

i..V„+(Td.C„.sinc{Td.Af,))-  2, 

This  was  then  slightly  altered  in  their  more  recent  work  to  the  following  equation: 

eHo- 

Z„A' 0  +  7(T<i  .C j  .smc(Td  .Af,  ))*  30 

where: 

No  is  the  thermal  noise  power  (Watts) 


28  A.  T.  Balaei,  A.  G.  Dempster  and  J.  Barnes,  A  Novel  Approaeh  in  Deteetion  and  Charaeterization 
of  CW  Interferenee  of  GPS  Signal  using  Reeeiver  Estimation  of  C/No,  2006),  1 120-1126. 

29  A.  T.  Balaei,  J.  Barnes  and  A.  G.  Dempster,  "Charaeterization  of  Interferenee  Effeets  on  GPS 
Signal  Carrier  Phase  Error"  (Melbourne,  Australia:  Spatial  Seienee  Institute,  Proeeedings  of  SSC  2005 
Spatial  Intelligenee,  Innovation,  Praxis:  The  national  biennial  Conferenee  of  the  Spatial  Seienee  Institute, 
September  2005). 

30  Balaei,  Dempster  and  Barnes,  A  Novel  Approaeh  in  Deteetion  and  Charaeterization  of  CW 
Interferenee  of  GPS  Signal  using  Reeeiver  Estimation  of  C/No,  1 120-1126 
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Ln  is  the  processing  gain  in  the  noise  (unitless) 

Td  is  the  integration  duration  time  (seconds) 

T  is  the  signal-reference  code  phase  difference  in  code  chips  (degrees) 

dsfc  is  the  actual  carrier  frequency  minus  the  estimate  of  the  carrier  frequency 
(Hz) 

iSfi  is  the  actual  interference  frequency  minus  the  estimate  of  the  interference 
frequency  (Hz) 

J  is  the  interference  power  (Watts) 

Cj  is  the spectral  line  coefficient 

Ro(t)  is  the  cross  correlation  of  the  received  C/A  code  and  the  receiver  replica  of 
the  same  code. 


The  calculation  of  the  actual  C/No  ratio  is  obtained  by  the  narrow-to-wideband 
power  ratio  method.  In  extremely  over-simplified  operational-speak,  this  method 
determines  the  C/No  ratio  as  an  expression  which  basically  divides  the  average 
narrowband  power  over  the  accumulation  interval  by  the  average  wideband  power  over 
the  interval.  Using  this  information,  the  measured  carrier  power-to-noise  density  as  a 
function  of  the  power  ratio  measurement  can  be  determined  to  be: 


dn^ 


T  M  —  Py; 


where  ir  is  the  ratio  of  the  average  narrow  band  power  to  the  average  wideband 
power 

T  is  the  accumulation  interval 
M  is  the  sub-intervals  of  x 


Figure  16  depicts  the  plot  of  an  experiment  which  illustrates  the  relative 
agreement  between  the  theoretical  C/No  and  the  actual  C/No  with  a  slight  offset  due  to 


3 1  Balaei,  Dempster  and  Barnes,  A  Novel  Approaeh  in  Deteetion  and  Charaeterization  of  CW 
Interferenee  of  GPS  Signal  using  Reeeiver  Estimation  of  C/No,  1 120-1126 
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the  lack  of  clarity  on  the  unknowns,  specifically  the  interference  power.  Referring  back 
to  the  mathematical  expression  for  the  theoretical  C/No  it  can  be  readily  observed  that 
other  than  the  frequency  of  the  interference,  there  are  three  other  parameters:  signal 
power,  background  noise  power,  and  interference  power.  The  first  two  of  these 
parameters  are  known  for  the  given  operating  environment.  We  know  what  the  signal 
power  should  be  from  a  GPS  satellite  and  we  know  what  the  background  noise  power 
should  be  when  we  take  into  account  the  operating  environment.  What  we  don’t  readily 
know  yet  is  the  interference  power.  Interference  power  can  be  estimated  from  the  AGC 
level  in  the  RF  front-end.32  Once  this  is  known  we  can  have  the  theoretical  C/No 
approximate  the  actual  C/No  as  closely  as  possible.  This  enables  the  ability  to  have  the 
least  amount  of  difference  between  the  two  calculations  at  the  frequency  where  the 
interference  exists.  Therefore,  the  frequency  where  there  is  the  least  amount  of 
difference  between  the  two  C/No’s  is  the  frequency  where  the  interference  is  occurring. 
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Figure  16.  C/No  plots  calculated  using  both  the  parametric[theoretical]  method  and  the 
power  ratio  (actual)  method  (From  Balaei,  Dempster,  and  Bames)33 


32  F.  Bastide,  Christophe  Macabiau  and  DM  Akos,  "Automatic  Gain  Control  (AGC)  as  an  Interference 
Assessment  Tool"  2003. 

33  Balaei,  Dempster  and  Barnes,  A  Novel  Approach  in  Detection  and  Characterization  of  CW 
Interference  of  GPS  Signal  using  Receiver  Estimation  of  C/No,  1 120-1126 
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The  previous  six  methods  have  illustrated  some  of  the  most  familiar  and  effective 
ways  to  identify  that  interference  is  occurring  on  a  GPS  signal.  We  are  also  interested  in 
determining  the  location  of  the  interfering  source  so  that  actions  can  be  taken  to  eliminate 
it.  We’ll  now  examine  some  of  the  most  common  methods  of  localization  of  an 
interfering  signal. 

B.  LOCALIZATION 

1,  Carrier/Noise  (C/No)  Jammer  Location  Sensor 

This  is  a  very  basic  method  of  estimating  jammer  location.  This  approach  takes 
the  Carrier  to  Noise  Ratio  (C/No)  data  from  the  GPS  receiver  and  logs  it  with  respect  to 
satellite  signal  strength  and  position  and  time  data  from  the  receiver.  One  of  the  main 
benefits  to  this  approach  is  that  no  additional  special  purpose  GPS  user  equipment  is 
needed  since  most  GPS  receivers  already  generate  this  information.  One  of  the  major 
drawbacks  to  this  method  is  that  it  depends  on  large  variations  of  C/No  ratios  as  a 
function  of  distance  from  jammer.  When  low  power  jammers  are  used  the  C/No 
variation  is  not  that  large  so  this  approach  lacks  the  ability  of  identifying  accurate  jammer 
locations.  Figure  17  illustrates  the  simplicity  of  how  a  C/No  Jammer  Location  Sensor 
would  work  in  a  networked  environment. 


Figure  17.  C/No  Sensor  Architecture  (After  Brown,  Reynolds,  Roberts,  &  Serie)^^ 


34  Brown  and  others,  Jammer  and  Interference  Location  System  -  Design  and  Initial  Test 
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This  approach  takes  time-correlated  data  from  numerous  receivers  and  networks 
all  of  this  information  together  and  compiles  it  at  a  central  station.  The  central  station 
then  estimates  jammer  position  based  upon  precisely  known  locations  in  the  area  and 
then  compares  this  information  to  their  reported  locations.  Based  on  the  C/No  ratio  an 
estimate  is  made  as  to  the  location  of  the  jamming  source. 

2.  Angle  of  Arrival  (AO A)  Jammer  Location  Sensor 

This  method  of  jammer  location  is  accomplished  with  standard  GPS  user 
equipment  that  is  integrated  with  a  Controlled  Radiation  Pattern  Antenna  (CRPA)  that  is 
capable  of  detecting  jammer  signals.  The  CRPA  places  a  null  in  the  antenna  pattern  in 
the  direction  of  the  jammer  by  using  the  detected  AOA  of  the  interfering  signal.  A  form 
of  triangulation  is  used  to  determine  jammer  location  by  taking  various  readings  of  AOA 
as  the  equipment  outfitted  with  GPS  conducts  its  movements.  Although  this  type  of 
information  can  be  obtained  from  numerous  GPS  systems  and  then  fed  into  a  centralized 
processing  system  to  estimate  jammer  location,  the  advantage  of  this  approach  is  that  it 
can  be  accomplished  with  only  one  system  which  is  moving  to  triangulate  in  on  the 
interfering  signal.  Figure  18  depicts  how  an  aircraft  might  use  this  type  of  system  to 
identify  a  jammer  location. 
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Figure  18.  Aircraft  using  AO  A  and  triangulation  to  locate  jammer  source  (From  Brown, 

Reynolds,  Roberts,  &  Serie)35 

One  disadvantage  of  this  approach  is  that  its  accuracy  is  limited  as  a  function  of 
the  pointing  accuracy  of  the  null  it  provides.  For  a  single  receiver,  the  accuracy  is  also 
affected  by  the  inertial  heading  accuracy  of  the  equipment  it  is  associated  with. 

3.  Time  Difference  of  Arrival  (TDOA)  Jammer  Location  Sensor 

This  method  of  locating  GPS  jammers  is  more  accurate  than  the  two  previously 
mentioned  approaches.  The  TDOA  approach  first  involves  the  separating  out  of  the 
jammer  signal  from  the  actual  GPS  signal.  The  jammer  signal  is  then  measured  in  a 
synchronized  manner  using  the  GPS  signal  to  get  highly  accurate  timing  information 
from  two  or  more  receivers  simultaneously  while  the  GPS  receivers  are  moving.  The 
analysis  of  the  amount  of  time  it  takes  for  the  jammer  signal  to  reach  the  receiver  can 
then  be  used  to  find  the  distance  from  the  jammer  to  the  receiver.  Using  this  information 
for  several  different  locations  of  at  least  three  (ideally  four)  receivers  yields  a  highly 
accurate  triangulation  picture  which  accurately  estimates  where  the  jamming  source  is 
emanating  from  in  three  dimensions. 

35  Brown  and  others,  Jammer  and  Interferenee  Loeation  System  -  Design  and  Initial  Test 
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Wikipedia,  although  not  necessarily  always  highly  regarded  in  the  academic  and 
research  circles,  does  provide  a  succinct  and  useful  version  of  how  multilateration  in 
conjunction  with  TDOA  measurements  yields  highly  accurate  locations  of  emitters.  Here 
is  a  portion  of  that  presentation: 

Consider  an  emitter  at  unknown  location  (x,y,z)  that  we  wish  to  locate.  Consider 
also  a  multilateration  system  comprising  four  receiver  sites  at  known  locations:  a  central 
site,  C,  a  left  site,  L,  a  right  site,  R  and  a  fourth  site,  Q.  The  travel  time  (T)  of  pulses 
from  the  emitter  at  (x,y,z)  to  each  of  the  receiver  locations  is  simply  the  distance  divided 
by  the  pulse  propagation  rate  (c): 

^l)-  4-  (y  -  vl)-  +  (~  -  ~l)-) 

^  (\/ (t  -  xr)-  +  {y-  Vr)-  +  (~  -  -i?)-) 

'^0  =  1  [y/ +  (y  -  Vo)-  +  (~  -  ~g)-) 

Tc  =  ^  (\/ -  ^c)-  +  (2/  -  yc)-  +  (^  -  ~c)-) 

If  the  site  C  is  taken  to  be  at  the  coordinate  system  origin. 

To  =  I  (v/AT7TA) 

Then  the  time  difference  of  arrival  between  pulses  arriving  directly  at  the  central 
site,  and  those  coming  via  the  side  sites,  can  be  shown  to  be: 

tl  =  Tl-Tc  =  ^  (i  - Ii)2  +  (y  - yiY-  +  (2  -  zl)-  - 

tr  =  Tr-Tc  =  -^  (^]J (i  -  ifl)2  +  (y  -  +  {:  -  :Ry-  -  +  y^- + 
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ra  =  Tg-Tc  =  -^  (^/(r  -  iq?  +  {y-yqf-  +  (-  -  -o)'  -  +  y-  + 

where  ULt  the  loeation  of  the  left  reeeiver  site,  etc,  and  Cis  the  speed  of 

propagation  of  the  pulse,  often  the  speed  of  light.  Each  equation  defines  a  separate 
hyperboloid.  The  multilateration  system  must  then  solve  for  the  unknown  target  location 
{x,y,z)  in  real  time.  All  the  other  symbols  are  known.36 

Another  point  to  be  made  here  is  that  multilateration  is  generally  much  more 
accurate  than  triangulation  due  to  the  fact  that  it  is  much  easier  to  measure  time 
accurately  than  it  is  to  form  the  narrow  beams  necessary  for  triangulation.  Appendix  B 
provides  a  much  more  thorough  and  developed  derivation  of  position  determination  using 
TDOA  of  GPS  satellite  signals.  The  derivation  in  Appendix  B  chooses  to  use  four 
equations  and  four  unknowns,  partially  because  there  are  guaranteed  to  be  four  satellites 
in  view  of  the  horizon  for  any  point  on  the  earth,  and  mostly  because  adding  a  fourth 
equation  allows  for  the  ability  to  reach  simple  and  satisfactory  solutions  due  to  the 
elimination  of  the  square  root  terms  which  the  inclusion  of  the  fourth  equation  provides. 


36  Wikipedia  contributors,  "Multilateration,"  Wikipedia,  The  Free  Encyclopedia, 
http://en.wikipedia.org/wiki/multilateration?oldid=228786716  (accessed  8  June  2008). 
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IV.  PLANNING  CONSIDERATIONS  FOR  CONDUCTING  GPS 

JAMMING 


The  fact  of  land-based  jamming  being  impeded  by  terrain  and  other  obstacles  are 
very  relevant  and  useful  pieces  of  information  when  it  comes  to  the  task  of  actually 
testing  a  GPS  jammer  within  the  continental  United  States.  Figure  19  illustrates  the 
magnitude  of  impact  that  even  a  0.5-watt  GPS  Jammer  could  have  on  a  metropolitan  area. 
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UNCLASSIFIED 


Untied  States 
Coast  Guanf 


Figure  19.  Unintended  GPS  Interference  in  a  metropolitan  area  (From  JNWC-Navwar- 

Threat  Overview  Brief)^^ 


37  Haseloff,  JNWC-Navwar-Threat  Overview  Brief  (Unelassified  Portion) 
United  States  Army  FA-40  Symposium,  1-2-30 
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Contrary  to  wishful  thinking,  one  is  not  allowed  to  just  haphazardly  go  about 
“testing”  their  GPS  jammer  wherever  and  whenever  they  want.  As  a  matter  of  faet,  the 
requirements  and  approval  proeess  to  eonduet  this  type  of  testing  can  be  extremely 
detailed  and  require  an  enormous  amount  of  lead-time  in  order  to  legally  conduct  the 
tests. 


GPS  is  used  extensively  by  the  civilian  community  in  commerce  and 
science.  Some  examples  of  civilian  GPS  applications  include  use  as  a 
timing  source  for  utilities  and  science,  tracking  devices  for  the 
transportation  industry,  quality  assurance  tools  for  agriculture,  and 
navigation  systems  for  civil  aviation.  Additionally,  GPS  is  used  for  its 
original,  intended  application  —  military  systems.  In  each  of  these  uses, 
one  commonality  exits:  the  requirement  for  noninterference  of  the  user 
community  due  to  DoD  testing. 38 

Figure  20  gives  a  very  general  frequency  clearance  process  for  conducting  GPS 
jamming  within  the  continental  United  States.  Frequency  clearance  is  essential  when  one 
considers  that  this  type  of  jamming  is  actually  affecting  the  signal  from  the  GPS  satellite 
and  therefore  would  affect  numerous  military  and  civilian  activities  if  not  properly 
managed  beforehand.  Looking  at  the  routing  in  Figure  20  one  can  quickly  surmise  that  it 
would  require  copious  amounts  of  time  to  work  the  GPS  jamming  request  through  all  of 
the  necessary  approval  authorities.  If  this  were  the  only  way  that  GPS  jamming  could  be 
conducted  then  at  least  there  would  be  a  consistent  approach  to  attacking  this 
requirement. 

Unfortunately,  specific  processes  for  obtaining  GPS  jamming  clearances 
vary  extensively  from  base-to-base,  and  even  within  bases.  The  process  of 
obtaining  a  frequency  clearance  at  some  facilities  is  no  different  than  if 
one  wished  to  install  a  two-way  radio  in  a  tmck.  Other  ranges  require 
extensive  analysis  (such  as  jamming  footprint  studies)  and 

documentation.39 


38  Matt  Boggs  and  Kenea  C.  Maraffio,  Mitigation  Paths  for  Free-Space  Jamming  (China  Lake, 
California:  GPS/INS  Systems  Seetion,  Naval  Air  Warfare  Center  Weapons  Division  (NAWCWPNS), 
http://www.fas.org/spp/military/program/nav/gpsjam.pdf  (aeeessed  17  July  2008). 

39  Ibid. 
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Figure  20.  Generic  GPSJ  [GPS  Jamming]  Approval  Process  (From  Boggs  and 

Maraffio)'^^ 

For  our  purposes  here  in  Monterey,  California  one  of  the  closest  and  most  logical 
choices  where  one  might  even  consider  conducting  GPS  Jamming  out  in  the  open  would 
be  at  Fort  Hunter  Liggett  which  is  about  an  hour  and  a  half  away  by  car.  Appendix  A 
provides  a  copy  of  their  Training  Support  Request  (TSR)  form  which  illustrates  the  first 
two  stages  of  Figure  20,  which  are  coming  up  with  a  testing  plan  and  then  submitting  that 
plan  for  approval  through  the  local  frequency  manager. 

In  order  to  come  up  with  a  valid  testing  plan  for  GPS  Jamming  one  of  the 
necessary  prerequisites  is  to  understand  not  only  the  power  output  of  GPS  Jammers  but 
also  the  proper  method  with  which  to  employ  them  to  cause  minimal  impact  upon  other 
GPS  users.  One  of  the  ways  to  do  this  with  GPS  Jamming  signals  is  to  use  jammers  with 
directional  antennas  instead  of  omni-directional  jammers.  Directional  antennas  afford  the 
opportunity  to  continue  with  meaningful  and  realistic  jamming  scenarios  while 
minimizing  the  likelihood  that  GPS  users  external  to  the  testing  will  be  affected. 
Directional  antennas/emitters,  as  the  name  implies,  allow  the  user  to  direct  the  signal  in 


40  Matt  Boggs  and  Kenea  C.  Maraffio,  Mitigation  Paths  for  Free- Space  Jamming  (China  Lake, 
California:  GPS/INS  Systems  Section,  Naval  Air  Warfare  Center  Weapons  Division  (NAWCWPNS), 
http://www.fas.org/spp/military/program/nav/gpsjam.pdf,  (accessed  17  July  2008). 
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the  direction  that  they  would  like.  Figure  21  shows  the  horizontal  radiation  pattern  for  a 
typical  Directional  Jammer.  In  this  Figure  the  primary  lobe,  the  one  with  the  greatest 
propagation,  is  directed  due  North  with  a  20°  horizontal  beamwidth  (10°  to  either  side  of 
0°).  The  secondary  lobes  on  either  side  of  the  primary  lobe  have  much  less  propagation 
range  than  the  primary  but  can  still  be  oriented  as  needed. 


Figure  21 .  Horizontal  Radiation  Pattern  for  Directional  Jammer  (From  Boggs  and 

Maraffio)"^! 

Directional  Jammers  when  coupled  with  proper  terrain  selection  can  provide 
significant  mitigation  capabilities  when  it  comes  to  containing  GPS  Jamming  signals. 
Knowing  that  you  have  a  Directional  Jammer  you  must  also  perform  a  reconnaissance  of 
prospective  jammer  testing  areas  to  ensure  that  adequate  terrain,  buildings,  etcetera  are 
available  to  act  as  a  shield  against  the  jamming  signal.  This  approach  was  taken  for  the 
planned  jammer  testing  at  Fort  Hunter  Liggett.  A  standard  1:50,000  terrain  map  of  Fort 
Hunter  Liggett  was  initially  used  in  concert  with  the  locations  of  available  Training  Areas 
provided  by  Range  Control,  to  get  a  sense  of  potential  GPS  Jammer  testing  sites.  Once 


41  Matt  Boggs  and  Kenea  C.  Maraffio,  Mitigation  Paths  for  Free- Space  Jamming  (China  Lake, 
California:  GPS/INS  Systems  Section,  Naval  Air  Warfare  Center  Weapons  Division  (NAWCWPNS), 
http://www.fas.org/spp/military/program/nav/gpsjam.pdf,  (accessed  17  July  2008). 
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several  Training  Areas  were  seleeted  the  reeonnaissanee  then  turned  to  the  very  useful 
and  relatively  new  reeonnaissanee  tool  known  as  Google®  Earth.  Google®  Earth  was 
used  to  zoom  in  on  aetual  satellite  images  of  the  training  areas  in  order  to  develop  a 
greater  appreciation  for  the  available  terrain.  The  program  was  used  to  identify  possible 
terrain  features,  like  mountains  for  example,  which  could  be  used  as  a  backstop  for  any 
GPS  jamming.  The  mountain  would  be  the  direction  that  the  Directional  GPS  Jammer 
would  be  pointed  at.  If  possible,  the  side  lobes  of  the  signal  propagation  would  be 
oriented  in  such  a  manner  to  make  maximum  effective  use  of  available  terrain  to  act  as 
shielding. 
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V.  JAMMING  DEVICE 


Effective  testing  and  evaluation  of  a  GPS  interference  detection  system  requires 
that  it  be  subjected  to  a  jamming  signal,  matching  the  GPS  LI  signal  in  frequency  and 
bandwidth.  To  that  end,  this  chapter  is  dedicated  to  the  construction  and  testing  of  a 
portable  low  power  GPS  jamming  device.  The  jamming  device  design  was  originally 
published  in  “Phrack”  online  magazine,  and  the  design  has  now  proliferated  around  the 
World  Wide  Web.  Figure  22  illustrates  the  schematic  diagram  for  the  jamming  device. 


I  PndthmlLED 


Figure  22.  Original  Jamming  Device  Schematic^^ 


42  Green  Bay  Professional  Packet  Radio,  "Noise  Jammer  for  the  LI  GPS  Frequency  (1575.42  MHz)," 
http://www.qsl.net/n9zia/,  (accessed  19  September  2008). 
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The  circuit  diagram  was  implemented  using  a  professional  schematic  capture  and 
layout  software  suite  called  PCB123®.  Using  the  PCB123®  schematic  program  the 
components  of  the  circuit  were  connected  as  illustrated  in  Figure  23. 


(5) 

Figure  23.  Jamming  Device  Component  Connections  in  PCB123  Schematic  Program 

One  of  the  difficulties  encountered  in  using  the  PCB123®  schematic  program  is 
that  several  of  the  components  used  in  circuit  were  not  available  as  standard  library  parts. 
Although  the  problem  was  eventually  overcome  by  using  the  build  part  utility  to  create 
the  required  components,  the  process  was  extremely  time  intensive.  There  were  also 
multiple  instances  in  which  the  program  crashed  and  had  to  be  reinstalled  to  recover  the 
schematic  file.  Once  the  schematic  was  complete,  the  resulting  file  was  saved  and 
converted  into  a  netlist.  The  netlist  file  maintains  a  list  of  all  the  components,  their 
package  types,  as  well  as  the  interconnections  between  them. 


42 


Once  completed,  the  schematic  and  its  associated  net  list  are  exported  to  the 
PCB123  layout  program.  Unfortunately,  the  exported  components  and  the  wires 
connecting  them  do  not  maintain  the  spatial  integrity  established  in  the  schematic 
program.  A  visual  comparison  of  Figure  23  and  Figure  24  below  illustrates  how  the 
components  look  before  and  after  the  export. 
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Figure  24.  Screenshot  of  Netlist  Export  to  PCB  Layout 

After  the  export,  the  obligatory  tasks  are  to  rearrange  the  components  in  a  logical 
manner  and  commence  the  wire  routing  process.  Generally,  components  are  positioned 
to  reflect  the  arrangement  of  the  original  schematic.  This  is  a  common  practice  that 
facilitates  troubleshooting  and  makes  it  easier  follow  signal  paths  through  components. 

One  of  the  critical  tasks  associated  with  building  a  layout  for  a  circuit  which 
operates  at  microwave  frequencies  is  determining  the  dimensions  of  the  microstrip  lines. 
Microstrip  lines  are  wire  traces  that  propagate  the  RF  signal  from  one  component  to 
another.  The  dimensions  of  the  microstrip  lines  in  an  RF  design  determine  the  desired 
characteristic  impedance.  The  specified  characteristic  impedance  for  the  jamming  device 
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is  50  ohms.  A  simple  formula  for  calculating  the  characteristic  impedance  of  a  microstrip 


line  is  given  by:  Zo  = 


87 


V^  +  1.41 


In 


5.98/; 

0.8W  + 1 
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In  this  equation,  Zo  is  the  characteristic  impedance  in  ohms,  s  is  dielectric 
constant,  and  w ,  t ,  and  h  are  the  width,  thickness  and  height  in  millimeters  of  the  copper 
trace  above  the  ground  plane,  respectively.  Figure  25  shows  a  cross-sectional  sketch  of  a 
microstrip  line  mounted  on  a  printed  circuit  board. 


Microittrip  Oimcnsions 


Figure  25.  Dimensions  of  PCB  Mounted  Microstrip  Line^^ 


Microstrip  transmission  line  is  a  kind  of  "high  grade"printed  circuit 
construction,  consisting  of  a  track  of  copper  or  other  conductor  on  an 
insulating  substrate.  There  is  a  "backplane"  on  the  other  side  of  the 
insulating  substrate,  formed  from  similar  conductor.  Looked  at  end  on, 
there  is  a  "hot"  conductor  which  is  the  track  on  the  top,  and  a  "return" 
conductor  which  is  the  backplane  on  the  bottom.  Microstrip  is  therefore  a 
variant  of  2-wire  transmission  line.  If  one  solves  the  electromagnetic 
equations  to  find  the  field  distributions,  one  finds  very  nearly  a  completely 
TEM  (transverse  electromagnetic)  pattern.  This  means  that  there  are  only 
a  few  regions  in  which  there  is  a  component  of  electric  or  magnetic  field 
in  the  direction  of  wave  propagation.  The  quasi  TEM  pattern  arises 

43  Green  Bay  Professional  Paeket  Radio,  "Mierostripline  Analysis  &  Design  Results," 
littp://my. atlienet.net/~multiplx/egi-bin/strip.egi,  (aeeessed  19  September  2008). 

44  Ibid. 
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because  of  the  interface  between  the  dielectric  substrate  and  the 
surrounding  air.  The  electric  field  lines  have  a  discontinuity  in  direction  at 
the  interface.  The  boundary  conditions  for  electric  field  are  that  the  normal 
component  (i.e.  the  component  at  right  angles  to  the  surface)  of  the 
electric  field  times  the  dielectric  constant  is  continuous  across  the 
boundary;  thus  in  the  dielectric  which  may  have  dielectric  constant  10,  the 
electric  field  suddenly  drops  to  1/10  of  its  value  in  air.45 


The  actual  dimensions  for  the  jamming  device’s  microstrips  were  determined  with 
an  online  calculator.  This  web-based  application  requires  only  that  one  specify  the 
dielectric  constant  and  the  characteristic  impedance.  The  remaining  parameters  for  the 
microstrips  are  autonomously  calculated  for  the  user.  Figure  26  below  displays  the 
results  for  the  jamming  device’s  microstrips.  The  values  specified  for  the  dielectric 
constant  and  characteristic  impedance  are  4.8  and  50  ohms. 


Operating  frequency  :  2450.000  MHz 
Dielectric  constant  :  4.800 
Effective  dielectric  constant  :  3.595 

Substrate  thickness  :  1.500  mm  (0.059  inches  /  59.055  mils) 


Microstripline  impedance  :  50.000  ohms 

Microstripline  physical  width  :  2.777  mm  (0.109  inches  /  109.349  mils) 
Velocity  factor  :  0.523 
Velocity  of  propagation  :  0.456 

One  wavelength  (360°)  ;  64.041  mm  (2.521  inches  /  2521.306  mils) 

Quarter  wavelength  (90°)  :  16.010  mm  (0.630  inches  /  630.327  mils) 


Figure  26.  Results  of  Online  Microstrip  Calculator's 


The  final  layout  for  the  printed  circuit  board  was  completed  with  microstrip 
specifications  annotated  in  Figure  26.  Figures  27  and  Figure  28  show  the  final  layout  and 
the  actual  printed  circuit  board  produced. 


45  David  Jeffries,  "What  is  Mierostrip  Transmission  Line?" 
http://personal.ee.surrey.ae.Uk/Personal/D.Jefferies/mstrip.htrnl,  (aeeessed  19  September  2008). 

46  Green  Bay  Professional  Paeket  Radio,  Mierostripline  Analysis  &  Design  Results  . 
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Figure  27.  Screenshot  of  Final  PCB  Layout® 
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(5) 

Figure  28.  Printed  Cireuit  Board  Produeed  Using  PCB  Layout 

The  jamming  device  is  comprised  of  three  major  sections.  First  is  the  power 
section,  which  provides  the  interface  for  the  12-volt  battery  that  runs  the  system.  Next  is 
the  noise  generator.  This  section  provides  the  “static”  which  interferes  with  the  pseudo¬ 
random  noise  (PRN)  codes  transmitted  by  the  orbiting  GPS  satellites.  Finally,  the  radio 
frequency  (RF)  section  uses  frequency  modulation  to  mix  the  noise  signal  with  the 
1575.42  MHz  LI  carrier  frequency,  and  then  subsequently  radiates  the  modulated  carrier 
through  an  antenna. 

A,  THE  POWER  SECTION 

As  mentioned  previously,  the  power  section  contains  a  12-volt  rechargeable 
battery,  which  provides  a  steady  flow  of  energy  to  the  jamming  device.  However,  like 

(S) 

many  unregulated  portable  power  supply  devices,  the  Powerflex  model  8SPA  measures 
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slightly  higher  than  its  advertised  12  volts  when  fully  eharged.  Figure  29  shows  the 
measured  terminal  voltage  supplied  by  the  battery. 


Figure  29.  Battery’s  Measured  Terminal  Voltage 

The  13.6  volts  supplied  by  the  battery  exceeds  the  supply  voltages  required  by  the 
integrated  circuit  components  in  the  noise  generator  and  RF  sections.  The  noise 
generator  section  has  a  single  integrated  circuit  that  requires  nine  volts  for  proper 
operation.  However,  the  RF  section  contains  three  integrated  circuits,  two  of  which 
require  only  hve  volts.  The  third  integrated  circuit  component  in  the  RF  section,  the 
voltage  controlled  oscillator  (VCO),  is  the  only  component  in  the  jamming  device  which 
requires  12  volts. 
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The  various  voltage  levels  demands  for  the  RF  and  noise  generator  sections  is 
achieved  with  the  use  of  three-terminal  voltage  regulators.  Each  voltage  regulator  has  an 
input,  output,  and  ground  terminal.  The  task  of  a  voltage  regulator  is  to  take  a  higher 
voltage  that  is  applied  to  its  input  terminal  and  produce  the  desired  regulated  voltage  at 
the  output  terminal.  The  regulated  output  terminal  voltage  is  fixed  at  the  value  specified 
by  the  manufacturer  for  the  particular  model  in  use.  For  our  jamming  device,  the 
regulated  output  terminal  voltages  are  12,  9,  and  5  volts  respectively.  The  battery  along 
with  the  three  voltage  regulators  is  connected  in  a  cascaded  fashion  as  indicated  in  Figure 


30. 


Figure  30.  Major  Components  in  Power  Section 

In  Figure  30,  the  battery’s  13.6-volt  positive  terminal  is  attached  to  the  input  of 
the  12-volt  regulator.  The  regulator’s  12-volt  output  becomes  the  input  to  the  9-volt 
regulator.  The  final  regulator  receives  the  9-volt  input  and  produces  the  final  5 -volt 
output  to  complete  the  voltage  distribution  network. 

B.  THE  NOISE  GENERATOR  SECTION 

The  key  components  in  this  section  are  the  FM386  audio  amplifier,  the  6.8-volt 
zener  diode,  and  a  2N3904  bipolar  junction  transistor.  The  operation  of  the  noise 
generator  begins  by  reverse  biasing  the  zener  diode.  The  zener  diode  is  designed  to 
operate  in  this  reverse  bias  region  once  the  zener  potential  of  6.8  volts  has  been  reached. 
The  zener  diode  produces  low  amplitude  noise  signals  up  to  100  MHz.  The  noise  signal 
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is  subjected  to  further  processing  via  the  LM386  audio  amplifier.  The  LM386  amplifies 
and  filters  the  signal  for  subsequent  injection  into  the  RF  section  through  a  variable 
resistor  and  capacitor  network.  The  oscillator  will  use  this  noise  signal  to  modulate  the 
LI  carrier  frequency.  Figure  31  shows  a  schematic  representation  of  the  components  in 
the  noise  section. 


Figure  3 1 .  Major  Components  in  Noise  Section 

C.  THE  RADIO  FREQUENCY  SECTION 

The  final  section  of  the  jamming  device  is  the  radio  frequency  section.  The 
function  of  the  RF  section  is  to  produce  the  LI  carrier  frequency  and  modulate  the  carrier 
with  the  noise  signal.  The  significant  components  comprising  this  section  are  the  voltage 
controlled  oscillator,  the  phase  lock  loop  (PLL),  and  the  prescaler. 

The  voltage  controlled  oscillator,  phase  lock  loop,  and  prescaler  form  a  closed 
loop  system  that  synthesize  the  carrier  frequency.  To  begin  the  process,  the  phase  lock 
loop’s  oscillator  input  is  driven  with  a  10  MFlz  reference  frequency  derived  from  a  quartz 
crystal.  Inside  the  phase  lock  loop,  the  10  MHz  reference  frequency  is  divided  512  times 
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by  the  chip’s  internal  counter  circuitry.  This  produces  a  new  reference  frequency  of 
19531.25  Hz.  The  new  reference  frequency  will  be  used  for  comparison  to  the  frequency 
output  of  the  prescaler. 

Initially,  the  voltage  controlled  oscillator  produces  an  output  frequency  in 
response  to  a  direct  current  voltage  applied  to  its  voltage  tuning  input.  A  resistive 
network  first  attenuates  the  output  signal’s  voltage  level.  Once  the  VCO’s  output  voltage 
is  reduced  by  the  attenuator  network,  a  portion  of  the  signal  is  fed  into  the  prescaler, 
where  its  frequency  is  divided  by  256  and  passed  to  the  phase  lock  loop.  At  the  PLL,  the 
VCO  signal’s  frequency  is  divided  by  315.  The  resulting  frequency  quotient  is  then 
compared  to  the  19531.25  Hz  reference  frequency. 

During  the  comparison  process,  the  phase  lock  loop  attempts  to  validate  that  the 
two  signals  have  the  same  frequency  and  phase.  If  both  signals  match  in  frequency  and 
phase,  the  phase  lock  loop  applies  a  direct  current  voltage  to  the  VCO’s  tuning  input. 
The  direct  current  voltage  at  the  tuning  input  again  drives  the  VCO’s  output  frequency 
where  the  process  begins  anew  and  continues  indefinitely. 

In  the  event  that  the  reference  frequency  and  the  VCO’s  output  frequency  do  not 
match,  the  phase  lock  loop  will  attempt  to  compensate  for  the  difference.  If  the  VCO’s 
frequency  is  higher  than  19531.25  Hz  reference,  the  phase  lock  loop  will  make  every 
effort  to  lower  the  VCO’s  frequency  to  19531.25  Hz  and  achieve  phase  lock.  The  phase 
lock  loop  will  attempt  to  raise  the  VCO’s  frequency  if  it  is  below  the  19531.25  Hz 
reference. 

The  phase  lock  condition  can  be  verified  through  one  of  several  outputs  on  the 
PLL.  The  most  readily  available  method  is  to  observe  the  status  of  the  phase  detector 
output  pin  using  an  oscilloscope.  When  the  reference  frequency  and  VCO  input 
frequency  are  matched,  phase  lock  is  achieved,  and  the  phase  detector  output  pin  will 
display  a  steady  direct  current  voltage  on  the  oscilloscope.  However,  if  the  VCO 
frequency  is  higher,  an  oscilloscope  will  display  a  series  of  negative  pulses,  and  a  series 
of  positive  pulses  if  it  is  lower.  Figure  32  illustrates  the  positive  pulses  detected  at  the 
phase  detector  output  indicating  lack  of  phase  lock. 
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Figure  32. 


Positive  pulses  at  phase  detector  output  indicating  lack  of  phase  lock 
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VI.  DETECTOR  AND  LOCATION  SYSTEM  ARCHITECTURE 


In  order  to  contend  with  the  threat  posed  by  portable  GPS  jamming  devices,  an 
architecture  must  be  established  to  facilitate  the  detection  and  location  of  electromagnetic 
interference.  Collectively,  the  components  of  the  architecture  should  allow  for  one  or 
more  of  the  localization  techniques  described  in  the  previous  chapter  to  be  implemented. 
The  specific  functions  inclusive  to  the  architecture  must  encompass: 

•  RF  sensing 

•  Data  logging 

•  Terrain  mapping 

•  GPS  signal-to-noise  monitoring 

These  functions  outlined  above  can  be  implemented  with  combinations  of 

commercially  available  hardware  and  software.  The  use  of  commercial  products  is  more 
practical  than  a  bottom  up  approach  to  designing  the  necessary  hardware  and  software 
components.  The  task  that  lies  ahead  for  the  remainder  of  this  chapter  is  identifying 
commercial  products  that  will  allow  the  architecture  to  be  realized. 

A,  RF  SENSING 

The  RF  sensor  is  the  most  critical  component  in  the  architecture.  The  sensor 
component  will  be  the  “eyes  and  ears”  of  the  system  and  will  provide  the  capability  to 
detect  electromagnetic  interference  within  the  bandwidth  of  interest.  Specifically,  the 
sensing  requirement  calls  for  a  component  that  can  detect  1575.42  MHz  RF  carriers  as 
well  as  any  accompanying  modulating  signal. 

(C) 

The  Digital  Scout  is  a  commercially  available  frequency  counter  capable  of 
detecting  RF  signals  from  10  -  2600  MHz.  The  unit  can  internally  store  up  to  1000 
detected  frequencies  or  alternatively,  log  the  captured  frequencies  to  an  external  device 
via  serial  bus  interface.  In  addition,  it  also  logs  data  on  the  relative  signal  strength  of 
detected  signals.  The  Digital  Scout’s  resolution  bandwidth  ratings  are  100  Hz  and 
IkHz.  The  resolution  bandwidth  specification  is  important  since  detection  of  interference 
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signals  requires  that  an  RF  sensor  have  resolution  bandwidth  down  to  1  kHz  or  less  at 
either  the  LI  frequeney  or  at  the  intermediate  frequeney.  Figure  33  illustrates  the  Digital 
Seoul®  frequency  counter. 


Figure  33.  The  Digital  Scout®  handheld  frequency  counter  (From  Optoelectronics®) 

The  Digital  Scout®  also  comes  with  accompanying  software  to  facilitate  external 
data  logging.  However,  as  an  alternative,  Classic  Business  Technologies®  offers  a 
software  suite  designed  to  work  with  Optoelectronics®  products.  The  Classic  Business 
Technologies®  suite  offers  more  data  logging  features  than  the  standard  package  included 
with  the  Digital  Scout®.  Figure  34  shows  an  example  of  data  that  can  be  logged  by  the 
OptoSuite  Pro®  software. 
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Figure  34.  Screenshot  showing  some  data  logging  features  available  in  Classic  Business 

Technologies  OptoSuite  Pro®  software 


B.  DATA  LOGGING 

The  data  logging  component  of  the  architecture  is  fairly  simple.  This  component 
can  be  implemented  with  either  a  portable  laptop  computer,  or  a  Personal  Digital 
Assistant  (PDA)  type  device.  The  primary  requirement  for  data  logger  is  that  is  must 
possess  sufficient  memory,  and  be  accommodate  the  software  demands  for  the 
architecture. 

C.  TERRAIN  MAPPING 

This  feature  of  the  architecture  will  co-exist  with  the  data  logger  as  a  software 
package.  The  purpose  of  terrain  mapping  software  is  to  provide  an  interactive  digital 
map  that  will  assist  in  geo-locating  a  potential  EMI  source.  The  mapping  software 
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should  allow  the  user  to  plot  coordinates  as  well  as  determine  range  and  bearing  between 
coordinates.  Google®  Earth  is  well  renowned  software  package  that  possesses  these 
features. 

D,  GPS  SIGNAL-TO-NOISE  MONITORING 

The  GPS  signal-to-noise  ratio  (S/N)  monitoring  feature  is  a  critical  component  of 
the  architecture.  The  ability  to  monitor  and  assess  changes  in  the  GPS  S/N  will  provide  a 
means  of  correlating  significant  drops  in  S/N  with  incidences  of  LI  carrier  frequency 
detections  picked  up  by  the  RF  sensor.  Many  commercial  GPS  receivers  support  this 
capability  through  the  National  Marine  Electronics  Association  (NMEA) 
communications  protocol.  Elsing  the  NMEA  protocol  and  serial  interface  cable,  an 
NMEA  enabled  GPS  receiver  can  be  connected  to  the  data  logger.  The  data  logger  can 
be  used  to  interrogate  the  GPS  receiver  with  NMEA  sentences  to  extract  its  internally 
logged  information  about  the  receiver’s  S/N.  Figure  35  shows  the  syntax  for  entering 
NMEA  sentences. 
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$GPGSV,2, 1, 08, 01, 40, 083, 46, 02,17,308,41,12,07,344,39,14,22,228,45*75 


Where : 


Satellites  in  view 

Number  of  sentences  for  full  data 

sentence  1  of  2 

Number  of  satellites  in  view 


Satellite  PRN  number 
Elevation,  degrees 
Azimuth,  degrees 
SNR  -  higher  is  better 
for  up  to  4  satellites  per  sentence 

the  checksum  data,  always  begins  with 


Figure  35.  Using  a  NMEA  sentence  to  extract  S/N  information  from  a  GPS  receiver^^ 


47  Dale  DePriest,  "NMEA  Data,"  http://www.gpsinformation.org/dale/nmea.htm  (aeeessed  22 
September  2008). 
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VII.  CONCLUSIONS  AND  RECOMMENDATIONS 


Although  this  thesis  was  not  able  to  fully  meet  the  initial  lofty  goals  of  Designing, 
Building,  and  Testing  a  Handheld  GPS  Interferenee  Deteetor,  mueh  progress  in  the 
groundwork  towards  that  endeavor  has  been  aehieved.  In  hindsight,  trying  to  aeeomplish 
this  mueh  teehnieal  sophistieation  by  two  Spaee  System  Operators  in  a  very  short 
timeframe  while  simultaneously  taking  eourses,  was  definitely  a  bridge  too  far.  But, 
having  said  that,  mueh  researeh  and  design  has  been  aeeomplished  whieh  ean  be  used  to 
drive  this  goal  further  down  the  road  to  fruition. 

The  disadvantaged  taetieal  warfighter  who  is  forward  deployed  requires  the 
eapability  to  gain  aetionable  intelligenee  when  his  GPS  environment  eneounters  a 
jamming  situation.  The  warfighter  needs  to  be  to  quiekly  aseertain  the  differenee 
between  when  he  is  indeed  being  jammed  and  when  it  is  nothing  more  than  his  GPS 
enabled  equipment  or  munitions  that  have  malfunetioned.  He  also  needs  the  ability  to 
learn  exaetly  where  that  interferenee  is  eoming  from  so  that  he  ean  determine  if  it  is 
malieious  or  not  and  then  take  the  appropriate  aetion  to  terminate  the  interferenee.  These 
forward  deployed  warfighters  at  the  tip  of  spear  in  harms  way  often  do  not  have  the  time 
to  wait  for  the  large,  detailed  analysis  eondueted  by  organizations  far  from  them  both 
physieally  and  mentally.  There  are  several  AF  TENCAP  programs  eurrently  on-going 
now  that  still  do  not  provide  the  eapability  to  provide  this  type  of  information 
immediately  and  autonomously  to  the  disadvantaged  warfighter  on  the  front  line.  These 
warfighters  do  not  have  the  ability  to  paek  a  eomputer  with  SIPRNET  eapability  to  aeeess 
eertain  sites  to  try  to  determine  what  has  happened  to  their  GPS  signal  and  even  if  they 
did  this  is  not  something  whieh  they  should  have  to  seareh  for.  The  bottom-line  is  that 
this  is  the  type  of  information  that  must  be  pushed  forward  to  individuals  depending  on 
the  aeeuraey  of  GPS  instead  of  being  pulled  after  a  problem  has  been  eneountered  and 
solutions  are  being  sought  after. 
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The  fact  still  remains  that  currently  in  the  war  zones  and  for  the  foreseeable  future 
there  will  continue  to  be  sources  of  interference  which  impede  or  totally  degrade  GPS 
signals  to  the  point  which  renders  GPS  munitions  and  equipment  inoperable.  According 
to  the  vast  majority  of  recent  reports  coming  from  the  war  zone,  the  current  sources  of 
GPS  interference  are  for  the  most  part  self-inflicted  interference  by  friendly  forces.  This 
interference  appears  to  be  mostly  due  to  errant  communication  devices  transmitting  at 
incorrect  frequencies  or  the  harmonics  of  certain  transmissions  frequencies  which 
coincide  with  the  L-band  frequencies  of  GPS. 

This  thesis  has  provided  an  overview  of  six  of  some  of  the  most  recent  and 
common  approaches  to  detecting  GPS  jamming  whether  that  jamming  is  pulsed  or  CW: 
Correlator  Output  Power,  Variance  of  Correlator  Output  Power,  Carrier  Phase 
Vacillation,  Active  Gain  Control  (AGC)  Control  Loop  Gain,  Multiple-Model  Adaptive 
Estimation  (MMAE),  and  Receiver  Estimation  of  C/No.  Several  of  these  approaches  are 
facets  of  other  approaches  and  when  used  in  conjunction  with  other  methods  provide  a 
more  accurate  characterization  of  the  interference. 

The  issue  of  localization  of  the  jammer  location  has  also  been  addressed  through 
the  three  approaches  of:  Carrier/Noise  (C/No)  Jammer  Eocation  Sensor,  Angle  of  Arrival 
(AOA)  Jammer  Eocation  Sensor,  and  Time  Difference  of  Arrival  (TDOA)  Jammer 
Eocation  Sensor.  The  most  accurate  of  these  is  the  TDOA  method  because  it  relies  on 
the  highly  reliable  nanosecond  timing  of  the  cesium  clocks  on-board  GPS  satellites.  This 
approach  based  on  highly  accurate  timing  is  markedly  more  accurate  than  the 
triangulation  approach  which  requires  extremely  narrow  beamwidths  to  be  pointed  over 
vast  distances  between  the  satellites  in  MEO  and  the  receivers  on  the  ground. 

The  Decision  was  made  to  design,  build,  and  test  a  low-powered  GPS  Jammer 

from  a  design  easily  obtained  off  of  the  Internet.  This  approach  was  chosen  because  it 

was  deemed  to  be  a  realistic  choice  considering  that  a  common  threat  of  the  United  States 

for  the  foreseeable  future  appears  to  be  terrorist  elements.  It  was  thought  that  they  would 

be  much  more  likely  to  try  to  gain  an  asymmetric  advantage  by  using  open  source  GPS 

Jammer  designs  rather  than  invest  the  time,  money,  and  infrastructure  required  to  develop 

the  larger  and  more  powerful  GPS  Jammers.  Also,  by  building  their  own  jammers  they 
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would  be  able  to  rid  themselves  of  the  necessity  to  purchase  GPS  jammers  which  might 
make  their  possible  intentions  able  to  be  more  easily  tracked  and  denied.  This  approach 
was  also  chosen  because  we  too  could  not  just  go  out  and  purchase  a  GPS  Jammer  off  of 
the  street  and  even  if  we  could  the  cost  of  even  small  jammers  would  be  prohibitive  for 
the  available  money  that  we  would  have  at  our  disposal. 

Unfortunately,  even  after  numerous  attempts  and  trouble  shooting  over  a 
considerable  timeframe,  we  were  unable  to  get  our  GPS  Jammer  to  produce  the  desired 
frequency  to  jam  the  GPS  LI  Frequency  (1575.42  MHz).  Achieving  this  fundamental 
benchmark  was  crucial  to  the  follow-on  work  of  testing  the  jammer  effective  ranges.  It 
was  also  critical  for  the  intended  analysis  of  the  jamming  on  the  GPS  signal  for  the 
civilian  Garmin  GPS  receiver  and  the  military’s  Precision  Lightweight  Ground  Receiver 
(PLGR).  All  coordination  had  been  made  for  training  areas  and  obtaining  PLGRs  for 
testing.  Without  an  operable  jammer  we  were  unable  to  conduct  the  field  tests  of 
detecting  and  locating  the  jamming  source. 

We  recommend  that  any  future  work  towards  this  endeavor  pick-up  where  we  left 
off.  A  lot  of  time  and  effort  was  put  into  learning  how  to  use  the  PCB  software  which 
allowed  us  to  design  the  PCB  boards  and  have  them  professionally  manufactured.  This 
measure  was  taken  to  minimize  the  probability  that  something  might  be  poorly 
constructed  by  two  novice  electronic  technicians.  In  the  process  of  meticulously 
soldering  all  of  the  surface-mounted  extremely  tiny  capacitors,  resistors,  conductors, 
etcetera,  we  have  graduated  from  novice  solderers  to  journeyman  solderers.  Recommend 
that  any  future  work  begin  with  continued  testing  of  the  GPS  Jammer  boards  to  ascertain 
why  the  correct  frequency  is  not  being  generated.  Once  this  gets  accomplished  then  the 
testing  of  the  jammers  effective  ranges  and  the  identification  and  localization  of  the 
jamming  can  be  examined  using  some  of  the  methods  described  in  this  thesis. 
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APPENDIX  A 


This  appendix  provides  an  example  of  a  blank  Training  Support  Request  (TSR)  to 
conduct  any  type  of  training  on  Fort  Hunter  Liggett,  California.  The  purpose  of 
providing  this  form  here  is  to  illustrate  and  corroborate  some  of  the  initial  requirements 
for  conducting  GPS  Jamming.  Although  this  form  is  not  specifically  for  GPS  Jamming, 
it  does  capture  the  requirement  to  provide  a  detailed  test  plan  (Concept  of  Operations) 
and  to  request  the  clearance  of  any  frequencies  that  will  be  used,  i.e.,  1575.42  MHz  for 
LI  GPS  jamming. 

FORT  HUNTER  LIGGETT  TRAINING  SUPPORT  REQUEST  (TSR)  FORM 

NOTE:  Units  must  complete  the  TSR.  Incomplete  TSR’s  will  result  in  a  delay  of  scheduling.  Previous 
TSR  editions  are  obsolete.  Only  personnel  listed  below  are  authorized  to  make  changes. 

Due  to  current  construction  projects,  areas  requested  are  subject  to  change. 

Submit  TSR  and  supporting  documents  via  email  to  the  Training  Division:  RangeOps2@liggett- 
emhl.armv.mil  Commercial  phone  numbers  are:  (831)  386-2510/2310/3145.  DSN:  686-2510/2310/3145.  If 
unable  to  email,  please  fax  to  (831)  386-2766  or  mail  to:  Commander,  CSTC,  Ft  blunter  Liggett,  ATTN: 
AFRC-FMFI-DTS,  Jolon,  CA  93978-7111.  Email  is  the  preferred  method  of  submission.  Please  call  to 
confirm  receipt  of  TSR  and  any  documents  that  are  sent. 


I.  General  Unit  Information 


A.  Unit: 

Date  TSR  Submitted: 

B.  Unit  Higher  Headquarters: 

Component:  USAR,  ARNG,  USN,  USNR,  USMC, 
Other  (specify) 

C.  Unit  Identification  Code  (UIC): 

DoD  Activity  Address  Code  (DODAAC): 

D.  Primary  Point  of  Contact: 

Alternate  Point  of  Contact: 

Phone: 

Phone: 

Fax: 

Fax: 

Email: 

Email: 

E.  Unit  Mailing  Address:  Include  Zip  Code,  Office  Symbol 

F.  Type  of  Training:  Annual  Training,  MUTA  4,  MUTA  5,  Other  (explain) 

G.  Personnel/Vehicle/ Aircraft  Strength: 

DATE  /  TIME 

Officers  M/F 

Enlisted  M/F 

Arrival  Advance  Party 

Arrival  Main  Body 

Departure  Main  Body 

Departure  Rear 

Detachment 

Types  of  Vehicles 

Vehicle  Quantity 

Types  of  Aircraft 

Aircraft  Quantity 
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H.  Unit  Training/Operations  Objectives:  (Individual  MOS  Training,  Weapons  Qualification,  FTX,  LFX, 
CLFX,  FCX,  CPX,  TEWT,  etc.) 

NOTE  Unit  mnst  provide: 

(1)  Concept  of  operations  and  training  objectives. 

(2)  Overlays  (convoy  routes,  foot  marches,  dig  plans,  obstacle  plans,  smoke/obscurant  operations,  surface 
danger  zone  diagrams,  etc.)  that  support  the  training  or  live-fire  exercise.  These  documents  must  be 
received  before  you  will  be  allowed  to  sign  for  any  training  site  or  facility. 

(3)  Appointment  Orders  for  OIC’s  and  RSO’s.  Land  Usage  Briefings  are  given  on  Fridays  at  1400  Hours  at 
Range  Control.  Units  are  required  to  read,  understand  and  comply  with  FHL  350-2  prior  to  conducting 
training. 


2.  Scheduling  of  Facilities.  All  facilities  and  support  will  be  requested  and  scheduled  by  the  Training  Division. 

A.  Training  Area  and  Facility  Requests.  All  training  area  and  range  requests  are  controlled  by  the  Training  Division 
(Bldg  S-320  Range  Control).  Check  each  Training  Area  or  Facility  required  and  provide  the  training  dates  and  times 
for  the  occupation  of  those  areas.  Only  request  areas  that  will  be  used.  Requesting  a  facility  does  not  give  you  the 
TA  unless  so  requested.  Provide  Actual  Training  or  Firing  Dates  and  Times  for  each  area  being  requested. 


Arrival  Date  /  Time 

Departure  Date  /  Time 

TA  1 

TA2 

North  Land  Nav  Course 

NBC  Chamber 

TA3 

TA4 

TA5 

TA6 

Crocker  Range 

TA6B 

TA7 

TA8 

TA9 

TA  10 

TA  11 

TA  12A 

Horton  DZ 

TA  12B 

TA  12C 

TA  13E 

East  Land  Nav  Beginner 

East  Land  Nav  Intermediate 

TA  13W 

25  Meter  Zero  Range 

KD  Automated  Record  Fire  Range 
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Combat  Pistol  Qualification  Range 

Confidence  Obstacle  Course 

Conditioning  Obstacle  Course 

Rappel  Tower 

TA  14 

TA  15 

EPW  Training  Site 

Convoy  Live  Fire  Range 
(SDZ  affects  TAs  15,16,19,20,21,24) 

Convoy  Blank  Fire  Course 
(TAs  15,20,  24) 

Patricia  Drop  Zone 

TA  16 

TTB  8J 

Area  8J  Buildings 

TA  16B 

Pugil  Pit 

Bayonet  Assault  Course 

Fland  Grenade  Inert  Assault  Course 

Rope  Bridge  Site 

Schoonover  Tactical  Assault  Airstrip 

TTB  Schoonover 

Miller  Shower  Point 

Lower  Blackjack  (Area  around  shower) 

TA  17 

TA  18 

TA  19 

TA20 

Demolition  Site  /  Engineer  Construction 

Arrival  Date  /  Time 

Departure  Date  /  Time 

TA21 

TA22 

MPRC  Ammo  Holding  Area 

Machine  Gun  Range,  MPRC 

Main  Tank  Tower,  MPRC 

M203  Range,  MPRC 

B9  Range,  MPRC 

(Firing  points  set-up  for  25  meter  Zero) 

Hand  Grenade  HE  Range,  MPRC 

TA23 

TA24 

TA25* 

TA26 

Palisades  Rappel  Site 

TA27 

MOUT  Site 

South  Land  Nav  Course 

TTB  Ward 

TA28 

TA29 

88M  Test  Course  (Main  Gate  Area) 

Drown  Proofing  Facility 
(Post  Fitness  Center  Pool) 

TUSI  Heliport 

Drop  Zone/Landing  Zone 

Post  Theater  (350  Pax) 
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Environmental  restrictions  apply  to  TA  25.  Environmental  Review  required  for  any  activity. 


B.  Billeting  Request:  Include  the  Quantity  by  Male  and  Female  Bays  or  Rooms,  Arrival  and  Departure  dates  and 
times. 


FACILITY 

Quantity  of  Male/Female 

Arrival  Date/Time 

Departure  Date/Time 

40-Person  Open  Bay 

2-Person  Rooms 

Admin  Office  Areas 

3.  Speeialized  Support  Requests.  All  specialized  requests  must  be  coordinated  with  the  Training  Division.  Provide  a 
Memorandum  to  the  Training  Division  requesting  the  support  needed.  All  requests  must  be  submitted  by  Training 
Division  unless  otherwise  noted. 


Email:  RangeOps2@liggett-emhl.armv.mil  Commercial  phone  numbers  are:  (831)  386-2510/2310/3145.  DSN:  686- 
2510/2310/3145.  If  unable  to  email,  please  fax  to  (831)  386-2766  or  mail  to:  Commander,  CSTC,  Ft  Hunter  Liggett, 
ATTN:  AFRC-FMH-DTS,  Jolon,  CA  93978-7111.  Email  is  the  preferred  method  of  submission.  Please  call  to  confirm 
receipt  of  any  documents  that  are  sent.  The  Training  Division  will  task  the  Ft  Hunter  Liggett  Directorates  to  provide  the 
support  requested.  Indicate  support  requests  needed  by  checking  the  appropriate  box  and  providing  additional 
memorandums  for  each  required  service.  Failure  to  do  so  will  result  in  a  delay  of  coordinated  support. 


Chemical  Latriues:  USAR  units  must  provide  a  Latrine  Request  if  needed.  All  other  entities  must  contract  a 
latrine  provider  directly  and  arrange  for  delivery  and  payment.  A  list  of  providers  will  be  provided  if  requested. 


Ice  request:  Provide  a  memo  with  quantity  and  type  requested,  date  and  time  for  pick-up. 


POL  Support:  FHL  offers  retail  and  bulk  fuel  capacities  of  JP-8,  MOGAS  and  other  POL  products.  Memos 
must  include  DODAAC,  fuel  type,  estimated  quantity  and  number  of  fuel  keys. 


POL  Vehicle  Support:  DOL  has  a  limited  number  of  administrative  vehicles  which  are  issued  on  a 
reimbursable  basis.  Provide  a  memo  for  request  and  method  of  payment  Amount  of  reimbursable  will  be 
dependent  upon  request. 


Telecommunications  Support:  FHL  controls  computer  interface,  field  phone  hook-ups  (MAGDROPS), 
frequency  usage  and  other  communications  services.  Provide  a  memo  with  specific  support  requirements. 


Radio  Frequency:  Units  must  submit  a  frequency  request  for  any  radios,  communications  or  electronic 
equipment. 


Radio  Support:  Units  must  provide  their  own  FM  radio  support.  A  limited  number  of  hand-held  radios  are 
available.  Provide  a  memo  for  type  of  radio  support  requested,  along  with  quantity  requested. 


Integrated  Training  Area  Management  (ITAMl:  Soldier  Field  Cards,  environmental  awareness  briefings, 
pre-exercise  planning  (avoiding  sensitive  cultural  &  natural  resources),  GPS/GIS.  Located  in  Bldg  331,  phone 
x-2305.  Email:  Art.Hazebrook@liggett-emh  1  .army.mil 


Environmental  Support:  Activities  described  in  FHL  350-2  require  environmental  clearance  or  for  hazardous 
waste.  Submit  Environmental  Reviews  to  the  Training  Division  Not  Later  Than  45  days  prior  to  training. 


Dining  Facility  Support:  FHL  Dining  Facility  can  feed  up  to  960  people  per  meal.  Mermites  and  UGR’s  are 
also  available  (Chow,  Box  lunch.  Beverages,  Mermites,  MRE’s,  Organizational  meals).  Memos  must  be 
submitted  30  days  in  advance  with  projected  headcount  and  feeding  plan.  Phone  (831)  386-3520.  Email: 
Justine.Brooks  1  @.us.armv.mil 
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Billeting:  Provide  a  current  DA  1687  for  individuals  to  draw  billets.  If  linen  is  requested,  provide  a  memo  for 
quantity.  Phone:  (831)  386-2644/2075.  Email:  FHLBilletReauest(S!liggett-emhl. armv.mil 


Arms  Room:  Units  must  provide  the  Access  Roster  a  minimum  of  14  days  prior  to  the  codes  being  issued. 
Roster  will  contain  at  least  2,  but  not  more  than  6  names,  time  period  needed  and  the  Commander’s  signature. 
Access  codes  will  be  picked  up  at  LEA  upon  arrival.  Email  requested  to  FHLBilletRequest(a),liggett- 
emhl.armv.mil 


MWR  Support:  For  the  Post  Pool,  Gym,  Picnic  grounds,  etc,  provide  memo  with  the  dates  and  supported 
requested.  Contact  the  MWR  manager  Mr  Tertulien  at  (831)  386-2910.  Email:  Charlemagne.Tertulien(g!liggett- 
emhl.armv.mil 


Religious  Support:  If  support  is  requested,  contact  the  Chapel  in  Bldg  190,  (831)  386-2808/2465.  Fax:  x-3102. 


□  Ammunition  Supply  Point  (ASP):  FHL  contains  a  fully  functional  ASP  for  issue  and  turn-in.  Hours  of 
operation  are  0730-1630  Hours,  Monday  thru  Friday.  All  ammunition  must  be  coordinated  with  FHL  ASP. 
Submit  DA  581  to  the  ASP  in  Bldg  S-723,  phone  (831)  386-2614,  Email:  quasas@liggett-emhl.armv.mil 
Note:  To  draw  ammunition,  all  units  must  bring  their  DA  581  to  be  signed  and  approved  by  the  Training  Division  prior 
to  drawing. 


Equipment  Coneentration  Site  (ECS-170):  The  DCSLOG,  63''*  RSC,  USARC  manages  and  controls  the 
equipment  from  ECS.  Units  must  first  contact  the  ECS  Site  Manager  and  determine  the  availability  of 
equipment  (vehicles,  radios,  etc)  and  make  initial  coordination.  Phone  (831)  386-2213/3598/2801/2770.  Email: 
ECS170@us.annv.mil 


AAFES/Commissarv:  If  AAFES  support  is  requested,  call  (831)  385-4585,  Bldg  80.  If  Commissary  support  is 
requested,  call  386-2190,  Bldg  83. 


Transient  Lodging  Requirements:  Available  for  TDY  and  temporary 
Lodging  Office  in  Bldg  196.  Phone  (831)  386-2511/2108 


stays.  For  reservations,  contact  the 


FAD  and  MIPR  Requirements:  Mailing  address  for  all  Finance  Authorization  Documents  (FAD)  (USAC  units)  or 
Military  Interdepartmental  Purchase  Requests  (MIPR): 


US  Army  Combat  Support  Training  Center 
Attn:  Resource  Management  Office 
Bldg  312,  9*  Street 
Dublin,  CA  94568 


POC:  Ms  Laura  Orozco 
Commercial  Phone:  (925)  875-4423 
Fax:  (925)  875-4424 
Email:  Laura.Orozco@usar.armv.mil 
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APPENDIX  B 


This  appendix  expounds  upon,  in  much  greater  detail,  the  actual  mathematical 
calculations  necessary  to  locate  a  signal  using  Time  Difference  of  Arrival  (TDOA).  The 
algorithm  is  developed  for  simultaneously  solving  four  equations  and  four  unknowns 
which  represent  the  distances  to/from  any  four  satellites  that  are  guaranteed  to  be  in  the 
horizon  of  any  location  on  earth In  their  article,  “A  synthesizable  VHDL  Model  of  the 
Exact  Solution  for  Three-Dimensional  Hyperbolic  Positioning  System,”  Ralph  Bucher 
and  D.  Misra  methodically  derive  and  develop  the  necessary  equations  for  determining 
positions  of  mobile  elements  on  the  earth  by  using  the  TDOA  information  of  the  satellite 
signals. 


48  Ralph  Bucher  and  D.  Misra,  "A  Synthesizable  VHDL  Model  of  the  Exact  Solution  for  Three- 
Dimensional  Hyperbolic  Positioning  System,"  VLSI  Design  15,  no.  2  (3  October  2001,  2002),  507-520. 
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version  will  utilize  the  lUOU  numeric_std  package  so  it 
can  be  synthesized  into  an  ASIC  by  anyone  seeking  a 
hardware  implementation. 

TIIK  ALGORITll.Vl 

The  essence  of  the  TDOA  technique  is  the  equation  for  the 
distance  between  two  points. 

d  =  \] -  Xif  {yz  -  .Vi)^+  (Z2  -  zi)^  (I) 

The  di.stance  between  a  mobile  and  a  station  is 
determined  indirectly  by  mca.suring  the  time  it  takes  for  a 
signal  to  reach  the  .station  from  the  mobile.  Multiplying 
the  TOA  t  by  the  signal  velocity  c  gives  us  the  di.stance  d. 
Fiom  now  on,  R  will  be  u.sed  to  represent  the  disiancre  d 
since  it  is  ihe  more  commonly  used  notation  in  TDOA 
literature. 

We  need  to  solve  for  the  three  unknowns  x,  y  and  z 
(mobile  po.sition).  Therefore,  Eq.  ( I )  is  expanded  to  three 
equations  when  the  specific  locations  of  three  satellites  i,j 
and  k  are  given.  This  requirement  can  be  ea.sily  met  since 
GPS  satellites  broadcast  their  exact  locatiores. 

ct/  =  R,=  \J (xi  -  x)^  +  (y/  -  yf  +  (zi  -  zf  (2) 

ctj  =  Rj=  ^ (xj  -  x)^  +(yj-  yf  +  (zj  -  zf  (3) 

=  /?*  =  \/ {-t|  -  x)^  +  (vj  -  y9  +  (ti  -  (4) 

where,  x.-,  y,-,  z,-,  Xj,  yj,  zj  and.r*,  y*,  zt  are  the  position  of  ith, 
yih  and  Jtth  satellite,  respectively  and  these  ptvsitions  vary 
with  time. 

Unfortunately,  solving  the  three  equations  for  three 
unknowns  will  not  lead  to  a  simple  and  satisfactory 
solution  because  of  the  square  root  tenns.  The  solution  can 
be  simplified  by  adding  another  satellite  /  for  an  additional 
equation.  In  addition,  the  accuracy  of  the  mobile  po.sition 
will  be  further  improved  if  four  equations  are  used.  This 
requirement  is  easily  met  since  four  GPS  satellites  are 
guaranteed  to  be  in  the  horizon  of  any  location  on  earth 
|9|.  The  four  equations  will  be  combined  to  form 
expressions  for  time  difference  of  arrivals  (TDOAs)  Ry, 

R,-Rj  =  R,j  =  \J(xi-  x)^  +  (v/  -  y)^  +  (Zi  -  z)^ 

-  \J Uj  -  x)^  +  (yj-  yf  +  (zj  -  z)^  (5) 


R,-fik  =  Hi=  \J (x,  - x)^  +  (y/  - y)^  +  (zt  - z)^ 

-  \J ixk  -xf+  (yi  -  y)-  +  (zt  -  zf  (6) 


Rk-Rj=  Rkj  =  \/ (x*  -  x)^  +  (.v»  -  y )^  +  (zt  -  zf 

-  \j(Xj  -  xf  ■{■{yj-yf  +(^  -  z)^  (7) 

Rk-  Ri=  Rki=  \J (X*  -  X)-  +  (vi  -  yf  +(zt-zf 

-  \J(x,  -  xf  +(y/  -y)^  +(z/  -  z)^  (8) 

Moving  one  square  root  term  to  the  other  side  gives  us; 

Ry  -  \J(x,  -  x)2  +  (y/  -yf+(Zi-  z? 

=  xf  +  (yj  -  y)2  +  (ij  -  z)2  (9) 

R,k  -  \l (x/  -  x)^  +  (y/  -  y  f  +  (z/  -  z)^ 

=  +  Cvt  -  yf  +  (a  -  zf  (10) 

Rk,  -  \/ (Xk  -xf  +  (y*  -  y)-  +  (z*  -  zf 

=  -\/ixj-  xf  +  (yy  -  yf  +  (^  -  z)^  (II) 

Rki  -  \J (.Xk  -  xf  +  (y*  -  y)^  +  (z*  -  zf 

=  -  ^(x,  -  xf  +  tv/  -  y)^  +  (zi  -  zf  (12) 

Squaring  both  side**  produces  ihc  following  set  of 
equations: 

Rl  -  2Rtj\/ (X,  -  xf  +  (v^  -  y)^  +  (Z/  -  z)^ 

+  (x,-.r)2  +  (y,  -y)2  +  (z/-z)^ 

=  (Xy  -  x)^  +  (yj  -  y)^  +  (^  -  z)’  (13) 

Rfj  -  lR,k  \J {x,  -  xf  +  (v/  -  yf  +  (Z(  -  z)^ 

+  (x,  -  x)^  +  (y/  -  y)^  +  (zi  -  z)^ 

=  Ct*  -  x)-  +  (y*  -  yf*  +  (zi  -  z)‘  ( 14) 

Rlj  -  2Rij\J(xi  -  x)^  +  (yt  -  y)^  +  (zt  -  z)^ 

+  (.ti  -  xf  +  (v*  -  yf  +  (a  -  z)‘ 

=  (xy  -  xf  +  (yj  -  yf  +(zj-zf  (15) 
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RI  -  IRuyJ (.Q  -  .t)^  +  O’t  -  y)^  +  (zt  -  zf 

+  (.r*  -  .r)^+Cvt->’)^+(a-zf 

=  (x,-xf+(y,-yf  +  (z,-Z?  (16) 

l-xpanding  the  squared  terms  to  the  left  of  the  square 
root  term  prtxluccs: 

R]j  -  2R,j\J (x,  -  j:)^  +  (y/  -  .v)^  +  (z,  -  zf  + 

-  2xiX  +  x^  +  yj  -  2y^y  +  y^  +  zj  -  2z4Z  +  Z^ 

=  xf-  2xjx  +  x^  +  yj  -  2yjy  +  +  zj 

-2zjz  +  z^  (17) 

R;^  -  2Rt  \j (x,  -  -r)^  +  Cv/  -  .v)^  +  (Z(  -  z)^  +  xj 

-  IxjX  +  x^  +  yj  -  2vty  +  +  zf  -  2z,z  +  z^ 

=  4-  ^  +4-  2.v*.v  +  y  ^ 

+  5~2ziz  +  z^  (18) 

Rj^  -  2Rtj\J(xi  -  xf  +  (v*  -  yf  +  (zi  -  zf  +  4 

-  Irj.r  +  x^  +  >^  -  2v*.v  +  -  2z*z  +  z^ 

=  4  ~  + -"^^  +  yj  -  2yjy + y^ 

+  4  ~  2ziZ  +  z'  (19) 

“  ^ki\/ (Jfi  -  +  (v*  -  y)^  +  (zt  -  z)^  +  4 

-  Iti-r  +  X-  +  -  2yty  +  y^  +  5  -  2z*z  +  z^ 

=  4-  2.r;.r  +  x^  +  yj  -  2yiV  +  y^ 

+  4  ~  (2(J) 

l-Hminating  the  x\  y^  and  z^  terms  reduces  the 
equation  set  to: 

Rjj  -  2R,j\J (xt  -  x4  +  (y/  -  y)^  +  (Zi  -  z)^  +  4 

-  Zrpe  +  >7  -  2yiy  +zj  -  2z/z 

=  4  ~  + yj  ~  ^yjy  +  ^  (^  • ) 


Rji  -  2R,t  \/ (JC,  -  x)^  +  (y/  -  y)^  +  (z,  -  z)^  +  4 

-  2x^  +yj  -  2y,y  +  zj  -  2z,z 

=  xj  -  Ixtx  +  -  2y*y  +  5  "  2z»z  (22) 

rI  -  2Rn  \J (Xk  -  xf  +  (y*  -  y  )^  +  (zi  -  z)^  +  4 

-  2xtx  +4-  2yty  +  5  -  2zjZ 

=4  ~  yj  ~  4  ~ 

Rl  -  2Ru\/ixt  -  xf  +  (y* -yf+(zt-zf+4 

-  Zxix  +4  ~  2yty  +  4  ~  2ztz 

=  xj  -  Ixix  +4  ~  2y/y  +  zj  -  2z/z  (24) 

Shifting  all  but  the  square  root  temi  to  the  right  and 
combining  similar  terms  produces: 

\J (jc.  -xf  +  (y,  -  y)^  +  (z/  -  zf 

=  [Rjj  +  4  -4  +yj  ~  yj  +  4  ~  4 

-  Irpc  +  2yjy  -  2y,y  +  2^z  -  2z,z]/2R,j  (25) 

sj(x,  -ar)^  +  (y,  -y)2+(z,  -z)^ 

=  i4k  +  4  -  4  +4  -  4 +4  -  4+ -'^kx 

-  2x,x  +  2yiy  -  2y4V  +  2ztz  -  2z,zl/2R,*  (26) 

\J (xt  -  x)^  +  (vi  -  y)^  +  (z»  -  z)^ 

=  [rI+4-4  +yi  -4  +  4- 4  + 

-  2xtx  +  2yjy  -  2yty  +  2zyz  -  2ztz]/2Ri^  (27) 
(.t*  -  jc)^  +  Cvt  -  y)^  +  (zt  -  z)^ 

=  [>^1+4 -4 +4 -4 +4- 4+ 2.t/.r 

-  2Ati.r  +  2y4V  -  2yiy  +  2ziz  -  2zkz]/2Ru  (28) 

The  equation  set  can  now  be  simplified  by 
substituting  Xji  for  xj  —  JC/,  yji  for  yj  —  y/  and  so  on. 

\J (xt  -  x)^  +(yi-y9  +(zt-  z)^ 

=  [/(J  +-tr  -•*?+>■,’  -yj+4  -  ^  +  2.ry,-r 

+  2yjiy  +  2zjiz]/2R,j  (29) 
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yj(xt  -  xf  +  Cv/  -yf  +  (z,  -  z)^ 

=  (/?*  -  .Vj  +>7  -  >•* +  zf  -  ^  +  2xt^ 

+  2yuy  +  2zhz]/lRt  (30) 

\/ (.ti  -  x)^  +  (y*  -  yf  +  (a  -  zf 
=  +.Vt  -  >j  +  4  -  Z;  +  2Jtyi-v 

+  2>'y*v+2^»z|/2/Jj^  (31) 

\j (.tj  -  X)-  +  (v*  -  yf  +  (zt  -  z)‘ 

=  +  4  -  z?  +  “’ttt-’f 

+  2v/*v  +  2z/iz|/2Ra  (32) 

liquations  (5)-(8)  are  nw  in  a  useful  arrangement, 
liquations  (29)-(32),  when  squared,  are  intersecting 
hyperboloids.  By  equating  Ilqs.  (29)  and  (30)  to  form 
Eq.  (33),  we  can  derive  a  plane  equation  in  the  form  of 
y  =  Ax  +  By  +  C  by  rearranging  the  terms  as  shown  in 
llqs.  (34)  and  (35). 

[/Jj  +x^ -Xj+yj-^  +  ^-^  +  Zxj,x+2yjiy+  Izjiz]/  2R,j 

-:^^-lrt^r+2.v^.y+2zt.zl/2f^,J^  (33) 

-^rx]  +>7  ->7+ - ^1/2 

-  /?y|  /?*  +  j:;  -  jcj  +>7  -  +  if  -  5 1/2 

=  Rij  l-v*i-r+  .Vh.v+  Zhz]  -  R,k{xj^  +.v^y + ^/zl  (34) 

-  RikXji  1  +.vI/(iy.Vi,  -  R,kXy )  +z[R,jZki  “ 

=  Rt\Rjj+x;-xf+yf-)^+zj-^]/2 

-  R.A’^i+^-'i  +y':-yk  -  z*l/2  (35) 

liquation  (35)  is  now  in  the  desired  form  of  a  plane 
equation  as  follows: 

.V=A.r  +  fiz  +  C  (36) 

where 

A  = 


and 


Rtjyki  Rtkyy, 

and 

(39) 

Similarly,  equating  Eqs.  (31)  and  (32)  produces  a 
second  plane  equation  y  =  Dx+  Ey  +  F.  The  resulting 
set  of  equations  are: 


y  = 

Dx  +  £z  +  F 

(40) 

where 

o  = 

^U-^jk  ^kf-^!k 

(41) 

Rkjyik  ~  Rkiy'jk. 

and 

E  — 

Rkiz/.  —  RkjZik 

(42) 

.Rkjyk  -  RkiyA. 

and 

«« +  if  -  +4  -  ^1  -  IflJ +ij  -  if +3rJ  -  yf  +  -  if  1 

(43) 

Equating  the  plane  Eqs.  (36)  and  (40)  pnxluces  a  linear 

equation  for  jt  in  terms  of  z. 

A.r  +  S.T  +  C  =  Dx  +  Ez 

+  F  (44) 

X 

=  Gz  +  H 

(45) 

where 

E-B 

^  A-D 

(46) 

and 

F -C 

"  A-D 

(47) 

Substituting  Eq.  (45)  back  into  Eq.  (36)  produces  a 

linear  equation  for  y  in  terms  of  z. 

y  =  A(Gz+«)  +  Bz  +  C  (48) 

y  =  lz  +  J 

(49) 

where 


I  =  AG +  B 


(50) 


R,kXj,  -  KjXk, 


Rtjyti  Rity'ji. 


(37) 


and 


J  =  AH  +  C 


(51) 
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liquations  (45)  and  (49)  ant  now  substituted  back 
into  Eq.  (30)  to  derive  the  position  z. 

2R,t\/(xt  -  {Gz  +  H)f  +  (y,  -  (fc  +  J)f  +  (ji  -  z)^ 

=  (/^i  +  Jtf  -  xj  +  >^  -  >1  +  zf  -  zj 
+  lt*,(Gz  +  «)  +  2Yt,(/z  +  y)+2zj,zl  (52) 


The  solution  for  z  is: 


The  zcotwdinate  can  be  put  back  into  the  linear  Eqs.  (45) 
and  (49)  to  solve  for  the  ctxirdinates  x  and  y. 


=  £,+*  (53) 

where 

+  lybJ  (54) 

and 

/,=  21.rt,G +>■*,/ +2z»/|  (55) 

4/f2((G-z^  +  +  z^  -  2Gz(.r/  -  H)-  llziyi  -  J) 

-  2z,z  ^(xt-H)-  +{yt-jf  ^  z]\ 

=  Lh'^  J.lKLz  +  K'^  (56) 

4R\IG-  +  /2  +  llz2  -  H/f,-*[G(.r,  -  H)  +  /(y^  -  J) 

+  Zilz  +  4/fi[(x.  -Hf  +(yi  -  J)-  +  Jj) 

=  Lh'^  +  2KLz  +  (57) 

To  obtain  z,  Eq.  (57)  is  rearranged  into  a  binomial 
equation. 

Mz^  -  Nz  +  O  =  0  (58) 

where 

M  =  +  I- +  \]  -  (59) 

and 

N  =  »RilG{Xi  -H)  +  /(Vi  -J)  +  z,]  +  2LK  (60) 
and 

0  =  4R■^l{x,-H)-+(yi-Jf+zJ]-K^  (61) 


VUDL  .MODEL 

The  equations  for  the  x,  y  and  z  po.sition  of  the  mobile  was 
mtxleled  using  VHDL.  The  numeiic_.std  package  was 
u.sed  to  construct  the  VHDL  mtxici  that  was  readily 
.synthc.sized  into  a  low  power  digital  circuit.  The  details  of 
the  circuit  arc  beyond  the  scope  of  this  paper.  The  input 
.signals  of  the  mtxlel  ate  the  x,  y,  z  po.sitions  of  four  GPS 
satellites  i,j,  k,  I  in  meters,  and  the  signal  TOAs  from  the 
individual  .satellites  to  the  mobile  in  nanoseconds.  The 
input  signal  assignments  arexi,yi,zi.  It,  xj,yj,zj,  tj,xk,  yk, 
zk,  ik.  xl.  yl,  zl  and  il. 

GPS  satellite  altitudes  arc  approximately  10,900 
nautical  miles  (20,186,800  m).  Therefore,  the  TOA  range 
is  roughly  6,700,000-7, 600,000ns.  This  means  the  input 
.signals  can  he  adequately  de.scrihed  by  a  32-bit  vector.  In 
order  to  perform  .signed  arithmetic  operatkins,  the  input 
.signal  assignments  arc  of  type  SIGNED.  The  binary 
representation  for  negative  numbers  is  2’s  complement. 
The  TDOAs  arc  converted  to  distances  by  multiplying 
them  by  the  binary  representation  of  100,000,  and  then 
dividing  the  result  by  the  binary  representation  of 
333,564  n.s/m. 

Since  all  signal  and  variable  assignments  are  vectors 
representing  integers,  a  method  for  maintaining  adequate 
precision  in  divide  and  square  root  operations  is  needed. 
This  will  be  achieved  by  multiplying  the  numerator  by  the 
binary  repre.sentation  of  l.Ox  10*®  in  divide  operations. 
This  method  is  preferred  to  using  decimal  point  notation  to 
decrea.se  the  complexity  of  the  mtxlel.  However,  the  length 
of  the  vectors  increases  for  successive  multiplication 
operations,  leading  to  a  200-bit  vector  for  the  interim 
value  O. 

The  numcric_std  package  dtx;s  not  contain  an  over¬ 
loaded  square  rixit  operator.  Therefore,  Dijk.stra'.s  bisec¬ 
tion  algorithm  |10|  is  used  to  compute  the  integer  square 
root  of  a  positive  integer  represented  by  a  64-bit  vector. 
Sixty  four  biLs  is  deemed  adequate  since  the  po.sition  z  and 
the  square  nxit  term  cannot  be  larger  than  32  bits  by 
definition. 

The  square  root  operation  gives  two  values  for  z,  so  the 
output  signals  zl,  z2,  xl,  Jt2,  yl,  y2  are  for  two  po.s.sible 
mobile  positions.  The  z  value  representing  the  mobile 
po.sidon  can  be  determined  by  using  a  fifth  satellite,  or 
checking  if  the  value  is  in  the  horizon  of  the  four  satellites 
relative  to  earth.  The  details  of  the  VHDL  mtxlel  of  the 
algorithm  are  provided  in  Appendix  A. 
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